- Data and analysis was done at a server in the class room (locked in a cabinet) - All parents signed a consent form before the trial started. - All data was erased after the trial ended.
The Swedish DPA decided that:
1. Consent is not valid of there is a power difference between the subject and the requester. 2. They should have documented a PIA (Privacy impact assessment). 3. They should have contacted the DPA before starting the trial.
Parents should be able to consent on behalf of their children and retraction should come from parents as well.
This used to be considered common sense but not anymore.
Good! Some progress at least.
Ignoring reality for the sake of ideology isn't progress.
By that logic, next a doctor will refuse to vaccinate an 8 year old because the child refused to give consent.
Exactly what stuff the parents can consent to is the real question and should be argued properly and not treated as any kind of "common sense". Things that are necessary for the safety of the children - like vaccines - yes. Other things are on much more shaky grounds.
Well (as you said - and thankfully) not any more.
I try to refer questions of consent to my kids, but in this case the question wasn't asked, they just said "hold your hands out" and went ahead.
I don't think minors can retract parental consent, but IMO schools should accommodate an individual's personal consent if practicable. Indeed schools should where possible be advocating for pupils before their parents if necessary (things like a tutor contacting a parent to request consent on a child's behalf).
Aside: I heard security staff make an exchange suggesting they'd chosen a particular person to search "because you like doing the $ageGroupIdentifier", which might have been innocent but came across as wholly wrong.