Two schools have been sanctioned for unlawfully disclosing children’s personal data to third parties without the express consent of their parents or guardians, providing an important lesson for institutions in the education sector that routinely handle sensitive information about minors.
The Office of the Data Protection Commissioner (ODPC) found that Nova Pioneer, a private international school, and Friends School Kaveye Girls High School, a public secondary school, to have breached Kenya’s data protection laws by sharing students’ personal information without appropriate legal grounds.
