Overview

• The Information Commissioner's Office (ICO) issued a formal reprimand to Chelmer Valley High School in Chelmsford.
• The school did not complete a Data Protection Impact Assessment (DPIA) before using the technology.
• Parents were informed through an opt-out letter, which does not meet legal consent requirements.
• Students were not given the opportunity to exercise their own data protection rights.
• The school has since begun obtaining explicit opt-in consent and conducted a DPIA.