A Call for Caution: Rethinking Technology Use in Schools

As digital learning tools become deeply embedded in Australian education, a recent report by The Educator has brought new urgency to a critical issue: how well are schools protecting student data?

While platforms like online learning apps, student management systems, and AI tools offer convenience and customisation, they also present hidden risks. Many of these tools collect sensitive information about students, often with little transparency about how that data is stored, shared, or monetised.

What are the risks?

According to the article, leading academics and digital rights experts are urging schools and policymakers to rethink their relationship with educational technology.

Dr Jamie Manolev from the University of South Australia highlighted that teachers often use digital platforms without fully understanding what data is being harvested or where it ends up.

“Many of these platforms function as black boxes,” he said. “We don’t really know what happens with student information once it’s collected.”

Dr Velislava Hillman from the London School of Economics agreed, noting that many tech providers operate in grey areas of regulation. Without strong privacy safeguards, there’s a growing risk of misuse or unauthorised disclosure of student information.

What does the law say?

In Australia, the Privacy Act 1988 and the Australian Privacy Principles (APPs) set out clear requirements for how personal information including that of students should be handled. Schools are considered organisations under the Act and must ensure that any third-party provider they engage also complies.

This includes:

• Notifying individuals when data is collected
• Ensuring data is stored securely
• Restricting access to authorised users
• Allowing individuals to access and correct their information

Yet, without formal training, many educators and school administrators are unaware of these obligations or how to meet them effectively.

What can schools do?

There is growing consensus among experts that schools need:

• Greater digital literacy among staff, particularly around privacy
• Clearer policies on third-party vendor agreements
• Regular audits of data storage and access
• Privacy-focused training programs

By prioritising privacy, schools can help ensure that their digital transformation doesn’t come at the cost of student trust or safety.

How we can help

To support schools in navigating these challenges, GRC Solutions has developed a dedicated training course: Privacy for Schools – Australia

• This course provides school staff with a practical understanding of:
• Australian privacy laws and how they apply to education
• The rights of students and parents regarding personal data
• Strategies for assessing third-party providers
• Tips for building a privacy-first culture at school

The course is available online via our Salt Compliance LMS, with flexible modules designed specifically for busy educators.

Take the next step

Protecting student data is no longer optional – it’s a responsibility. With scrutiny growing and new technologies emerging daily, now is the time for schools to put privacy at the centre of their digital strategy.

Learn more about our Privacy for Schools – AU course or explore our full Education Sector Compliance Training programs.