I propose to take Questions Nos. 416 and 417 together.
The Data Protection Commission recently published a "Data Protection Toolkit for Schools" to assist with specific concerns and challenges faced by schools and following consultation with a number of organisations in the education sector. The Toolkit is available on the DPC's website and includes specific guidance about photographs of pupils. The DPC has also published other guidance on this subject: Taking photos at school events.
The Data Protection Commission is the national independent authority responsible for upholding the fundamental right of individuals to have their personal data protected. It is the supervisory authority responsible for monitoring the application of the GDPR. The statutory powers, duties and functions of the DPC are as established under the Data Protection Act 2018.
The responsibility for compliance with data protection legislation rests with each school board of management. Schools/Education and Training Boards are separate data controllers from the department under data protection law and are responsible for their own compliance with the GDPR and Data Protection Act. Schools can consult with their management body and/or the DPC if they require further advice.