A parent of a child attending our institution submitted a paper-based request asking whether the educational institution uses the Public Information Bulletin (BIP), and if so, at what address. Should this request be consulted with the Data Protection Officer (DPO)?

No. The question does not pertain to personal data protection matters, and therefore does not require DPO consultation.

A request was submitted to the institution seeking disclosure of the principal’s monthly salary figures. Are we obligated to provide this information?

Yes. The principal’s salary is considered public information and must be disclosed in response to such a request.

The institution includes a shortened privacy notice on all documents sent to parents throughout the school year. Is this an appropriate practice?

No. Under the GDPR, the information obligation must be fulfilled only once—at the first appropriate point of contact. Repeating the notice with every document is unnecessary.

A School and Preschool Complex invited other primary schools and kindergartens to participate in a competition. The institution wishes to publish a list of winners on its website. Is parental consent required for this publication?

No. Publishing a list of competition winners does not require consent. However, consent must be obtained if the institution intends to publish the full list of participants.