Protecting Children's Data in Preschools Under Current Vietnamese Law

List each category of data the school collects and connect it to a specific operational purpose. Habitual collection and indefinite retention increase risk without necessarily helping children or families.

• Enrollment records: identity details, guardian contacts, and authorized pickup persons.
• Care and health information: allergies, medication, relevant conditions, and emergency contacts.
• Photos, video, and learning work: distinguish internal use, private family sharing, and public promotion.
• Cameras or biometrics: assess necessity and less intrusive alternatives before deployment.

A single blanket form can obscure what a family is agreeing to. Separate choices by purpose, use plain language, and retain a record of the date, scope, and any later change.

• Explain what data is used, for what purpose, who may receive it, and how long it is kept.
• Do not bundle essential care administration with permission for promotional media.
• Provide a clear contact for questions, corrections, and changed choices.
• When a choice changes, update access and relevant sharing channels.

Teachers, health staff, finance teams, admissions staff, and leaders do not automatically need the same access. Permissions should follow responsibilities.

• Review accounts when staff move classrooms, change roles, or leave.
• Limit downloads to personal devices and avoid channels the school cannot administer.
• Keep records of significant actions such as viewing, editing, exporting, or sharing a child record.
• Define how staff report and respond to misdirected messages, lost devices, or unusual access.

Different records may have different retention duties. Compare sector recordkeeping rules, contracts, and data-protection requirements before setting a schedule for each category.

• Assign an owner and review date to each data store.
• Delete or anonymize copies that no longer have a valid purpose.
• Include exports, old devices, shared folders, and service providers in the review.