Educational institutions may process student and parent data for administration and running the institution, academic progress monitoring and curricular or extra-curricular activities (consent for informal activities). Medical data and student welfare data may be processed in the student's best interest only if held in separate distinctive secure files, forwarded only to a transfer institution during compulsory schooling, and destroyed once the student stops attending. Visual images need consent. Historic records may not keep special category or welfare data. Consent is needed before disclosing student data to third parties other than education authorities, a transfer school, examination bodies, health authorities, hospitals and clinics, the Police in criminal investigations, social workers where welfare is at risk, Jobsplus (for students aged 14 or over) and courts.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.