GDPR and Sharing of Data with Parents Guardians for students over the age of Maturity (18yrs of Age)

On foot of the introduction of the new General Data Protection Regulations (GDPR), Coláiste Bhaile Chláir was required to review the legal basis upon which it processes student data as part of the GRETB Data Policy. The full text of this policy is available at

One of the bases upon which Coláiste Bhaile Chláir processes student data is pursuant to section 22(2)(b) of the Education Act 1998, which requires Principals and teachers to “regularly evaluate students and periodically report the results of the evaluation to the students and their parents.” However, of particular significance in the context of data protection is section 9(g) of that Act which requires that a school use its resources to “ensure that parents of a student, or in the case of a student who has reached the age of 18 years, the student, have access in the prescribed manner to records kept by that school relating to the progress of that student in his or her education.”


Essentially, this means that the school’s legal basis for communicating student data with parents ends when the student attains the age of majority (eighteen years).

See full letter to parents here/students over 18yrs of age here

See Letter/Nomination Form for students aged 18yrs to nominate their parent/guardian to have access to their data here