SchoolQuest DPIA
This Data Protection Impact Assessment records the core processing, risks and mitigations for the Founding Schools pilot.
Processing
SchoolQuest processes primary-school pupil identifiers kept deliberately minimal, learning activity, progress/reward information, school/class membership, family links and security/session information to deliver the educational service.
Key risks to assess
Unauthorised pupil access; incorrect family linking; excessive retention; school-to-school data leakage; administrator compromise; inappropriate commercial reuse; re-identification in reporting; inaccurate age/year content; third-party/subprocessor risk.
Existing mitigations
Minimal identity fields, hashed credentials/tokens, permission boundaries, no child messaging, no sponsor child profiles and separation of educational performance from advertising targeting. SchoolQuest keeps residual risks and mitigations under review throughout the pilot.
Contact
For data protection, privacy, safeguarding or online-safety questions about SchoolQuest, contact data@schoolquest.co.uk. Schools may use this address for data-rights requests, security concerns and safeguarding enquiries relating to the service.
SchoolQuest keeps these documents under review and will update the version and review date when material changes are made.