Consent & Authorisation Framework
Effective and Last Updated: July 15, 2026
1. Purpose
This Framework helps schools determine when consent, notice, institutional authority, parent or guardian permission, student assent, or another legal basis is required. It is not a substitute for country-specific legal advice.
2. General Rules
Consent must be specific, informed, freely given where required, recorded, understandable, and as easy to withdraw as to give. Consent is not appropriate where a school cannot genuinely offer a choice or where law requires processing. Schools must identify another lawful basis in those cases.
3. School Authorisation
Before activation, an authorised school representative must confirm the School's identity, legal authority, country, privacy contact, safeguarding contact, administrators, approved modules, retention rules, and authority to provide School Data.
4. Parent and Guardian Authority
Schools must verify parent or guardian authority before linking a child, disclosing records, or accepting permission. Local law determines when permission is required and when a mature student may act independently.
5. Student Participation
Children should receive age-appropriate explanations and have their views considered according to age, maturity, best interests, and national law. Student assent supplements rather than replaces required adult or institutional authority.
6. Feature-Specific Decisions
Schools must assess and document authority for:
- Account creation and family linking.
- Live transport location and access by family or staff.
- Photographs, profile images, publications, and promotional media.
- Forums, alumni directories, and optional community participation.
- Optional promotional communications.
- Cross-border transfers where national law requires consent or approval.
- Sensitive disciplinary, safeguarding, disability, or special-education information.
7. Required Records
Record the person authorising, child or user concerned, purpose, information provided, date, method, version of notice, scope, expiry if any, and withdrawal. Do not bundle optional uses into essential school-service acceptance.
8. Withdrawal and Consequences
Explain how to withdraw and which feature will stop. Withdrawal does not invalidate earlier lawful processing and cannot require deletion of records the School must retain. Never penalise a child for refusing an optional use.
9. Review
Renew authorisation when purpose, audience, sensitivity, provider, country, or risk materially changes, and whenever national law requires.