Personal data is the information that collects the identification of individuals and their personal characteristics or circumstances. Such personal data constitutes valuable personal information that serves to carry out everyday professional activities, but at the same time reveals private data about a person’s personality, preferences or tastes, among others.
The implementation of the GDPR will give the green light to new rights that will reinforce the capacity of control that a person has over his or her data, in addition to his or her right of access, that is to say, the right to know who has this information, to whom it is communicated or for what reason. It also determines the obligations that those responsible need to comply with when processing it.
In this new scenario, and just as a private company has in its possession data referring to individuals, something similar happens in the field of education. Schools have not only material about their workers but also about their students: photographs, documentation, evaluations, files, medical reports, etc. In some situations, they even handle data from special categories which, due to their characteristics, require stricter control (for example, ethnicity or race).