In 2017 I was contracted by the Royal Society, writing case studies & drafting the report 'Data Management & Use: Governance in the 21c'

I was asked to write on the DfE National Pupil Database as an eg of good data gov. I found v little good to say: governed terribly; disproportionate; inaccurate; insecurely given to private cos.

The working group spiked my report for controversy.

The ICO now says a single misuse instance justfies a £10m fine. I should've been bolder.

https://www.theguardian.com/education/2022/nov/06/woeful-dfe-blamed-as-betting-firms-gain-access-to-childrens-data

‘Woeful’ DfE blamed as betting firms gain access to children’s data

The department has been found responsible for an ‘unacceptable’ breach of data protection laws

The Guardian
@mikarv not surprised that it’s used for age verification “‘cos why not if you have the data and it can be made useful in this way” but wholly unacceptable of course. And for AV you don’t need personal data processing if designed well. A centralized (I assume it is) pupils database is already not a very good idea.