A yearbook uses students' names, photos and words. That is personal data, and the school is responsible for handling it properly. This is a practical checklist, not legal advice.
Questions to ask any provider
- Will you sign a data processing agreement with the school?
- Where is student data stored?
- Who at your company can see it?
- How long do you keep it, and how is it deleted?
- How do you handle students under 16?
- What happens if there is a breach?
Want your yearbook made for you?AerEthos designs every page. Your staff give about an hour in total.
Good practice for the school
- Collect only what the book needs
- Tell students and parents what the data is for
- Get the right permissions for photos, especially of younger students
- Keep one contact person for the provider
How AerEthos handles it
We act as the school's data processor under a data processing agreement, and we do not take personal data from anyone under 16. The Vision archive is hosted with EU data residency. Our DPA page has the details.
