IP - 07121-1/2021/540: Difference between revisions

From GDPRhub
(Created page with "{{DPAdecisionBOX |Jurisdiction=Slovenia |DPA-BG-Color= |DPAlogo=LogoSI.png |DPA_Abbrevation=IP |DPA_With_Country=IP (Slovenia) |Case_Number_Name=07121-1/2021/540 |ECLI= |Or...")
 
 
(One intermediate revision by one other user not shown)
Line 52: Line 52:
}}
}}


Obtaining information on the child's health and developmental characteristics, knowledge of which is necessary for the child's safety and work with the child, and on whether the child has been vaccinated, is not appropriate at the stage of submitting an application for enrollment in kindergarten.
The Slovenian DPA stated that obtaining information on the child's health and developmental characteristics, knowledge of which is necessary for the child's safety and work with the child, and on whether the child has been vaccinated, is not appropriate at the stage of submitting an application for enrollment in kindergarten.


== English Summary ==
==English Summary==


=== Facts ===
===Facts===
Question: is it permissible for a kindergarten to ask for information about a child's health and immunisation status as early as the child's application for admission (i.e., before admission). You have attached a sample of such an application from your municipality.
Question: is it permissible for a kindergarten to ask for information about a child's health and immunisation status as early as the child's application for admission (i.e., before admission). You have attached a sample of such an application from your municipality.


=== Dispute ===
===Dispute===




=== Holding ===
===Holding===
Obtaining information on the child's health and developmental characteristics, knowledge of which is necessary for the child's safety and work with the child, and on whether the child has been vaccinated, is not appropriate at the stage of submitting an application for enrollment in kindergarten.
Obtaining information on the child's health and developmental characteristics, knowledge of which is necessary for the child's safety and work with the child, and on whether the child has been vaccinated, is not appropriate at the stage of submitting an application for enrollment in kindergarten.


== Comment ==
==Comment==
''Share your comments here!''
''Share your comments here!''


== Further Resources ==
==Further Resources==
''Share blogs or news articles here!''
''Share blogs or news articles here!''


== English Machine Translation of the Decision ==
==English Machine Translation of the Decision==
The decision below is a machine translation of the Slovenian original. Please refer to the Slovenian original for more details.
The decision below is a machine translation of the Slovenian original. Please refer to the Slovenian original for more details.


<pre>
<pre>
<!doctype html><html lang="sl"><head><title>Data on vaccination and health status on the application for enrollment of a child in kindergarten - IPRS </title><base href="https://ip-rs.si/" /><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta name="description" content="" /><meta name="robots" content="index,follow" /><!-- IPRS prenos --><link rel="shortcut icon" href="https://www.ip-rs.si/fileadmin//user_upload/favicon.ico" type="image/x-icon"><!-- <link rel="stylesheet" type="text/css" href="https://www.ip-rs.si/typo3conf/ext/news/Resources/Public/Css/news-basic.css?1578317372" media="all"> --><!-- <link rel="stylesheet" type="text/css" href="https://www.ip-rs.si/typo3temp/assets/css/b5ece644a2.css?1597648248" media="all"> --><!-- <link rel="stylesheet" type="text/css" href="https://www.ip-rs.si/typo3conf/ext/t3colorbox/Resources/Public/Css/1.5.13/example1/colorbox.css?1501572977" media="all"> --><!-- <link rel="stylesheet" type="text/css" href="https://www.ip-rs.si/typo3conf/ext/pxa_survey/Resources/Public/Css/pxa_survey.css?1592208471" media="all"> --><link rel="stylesheet" type="text/css" href="assets/css/styles.min.css?v=1" media="all"><link rel="stylesheet" type="text/css" href="assets/css/fontawesome/css/all.css?v=1" media="all"><link rel="stylesheet" type="text/css" href="assets/css/user.css?v1" media="all"><script src="assets/js/jquery_2.1.3.min.js" type="text/javascript"></script><script src="assets/js/bx.slider.js" type="text/javascript"></script><!-- <script src="https://www.ip-rs.si/typo3temp/assets/js/9d57a8584e.js?1597648248" type="text/javascript"></script> --></head><body id="scheme4"><div class="page-h sub pr" id="scheme1"><header role="banner"><div class="row p pr"><img id="printLogo" src="/assets/images/logo/printLogo.gif" width="174" height="66" alt="" /> <a class="logoIPRS ti pa" href="/">Information Commissioner</a> <span class="logoRS ti pa">Republic of Slovenia</span><div class="pa lang"> <a href="iskalnik-po-strani"><img src="https://www.ip-rs.si/fileadmin/user_upload/jpg/iskalnik.png" height="25" width="25"></a> <a href="priredbe-v-slovenski-znakovni-jezik"><img src="https://www.ip-rs.si/fileadmin/user_upload/jpg/gluhi.png" height="25" width="25"></a></div><nav role="navigation"><ul id="mainNav"><li  class="first"> <a href="/">Home</a></li><li > <a href="novice/">News</a></li><li> <a href="zakonodaja/">Legislation</a><ul><li> <a href="zakonodaja/ustava">Constitution</a></li><li> <a href="zakonodaja/reforma-evropskega-zakonodajnega-okvira-za-varstvo-osebnih-podatkov/">Reform of the European legislative framework for the protection of personal data</a></li><li> <a href="zakonodaja/zakon-o-informacijskem-pooblaščencu">Information Commissioner Act</a></li><li> <a href="zakonodaja/zakon-o-varstvu-osebnih-podatkov/">Law on Protection of Personal Data</a></li><li> <a href="zakonodaja/zakon-o-dostopu-do-informacij-javnega-značaja/">Access to Public Information Act</a></li><li> <a href="zakonodaja/zakon-o-inšpekcijskem-nadzoru">Inspection Act</a></li><li> <a href="zakonodaja/zakon-o-splošnem-upravnem-postopku">The Law on General Administrative Procedure</a></li><li> <a href="zakonodaja/zakon-o-varstvu-osebnih-podatkov-na-področju-obravnavanja-kaznivih-dejanj">Personal Data Protection Act in the field of criminal proceedings</a></li><li> <a href="zakonodaja/drugi-zakoni">Other laws</a></li><li> <a href="zakonodaja/pripombe-informacijskega-pooblaščenca-na-predloge-predpisov/">Comments of the Information Commissioner on draft regulations</a></li><li> <a href="zakonodaja/mednarodni-predpisi">International regulations</a></li></ul></li><li> <a href="obrazci/">Forms</a><ul><li> <a href="obrazci/varstvo-osebnih-podatkov/">Protection of personal data</a></li><li> <a href="obrazci/obrazci-s-področja-pacientovih-pravic">Patients&#39; rights</a></li><li> <a href="obrazci/obrazci-s-področja-dostopa-do-informacij-javnega-značaja/">Public information</a></li><li> <a href="obrazci/obrazci-za-medije">Information for the media</a></li></ul></li><li> <a href="publikacije/">Publications</a><ul><li> <a href="publikacije/letna-poročila/">Annual reports</a></li><li> <a href="publikacije/priročniki-in-smernice/">Manuals and guidelines</a></li><li> <a href="publikacije/poročila">Reports</a></li><li> <a href="publikacije/multimedija">Multimedia</a></li><li> <a href="publikacije/infografike">Infographics</a></li></ul></li><li> <a href="o-pooblaščencu/">About the trustee</a><ul><li> <a href="o-pooblaščencu/osebna-izkaznica">ID card</a></li><li> <a href="o-pooblaščencu/zgodovina-informacijskega-pooblaščenca">History</a></li><li> <a href="o-pooblaščencu/pristojnosti/">Responsibilities</a></li><li> <a href="o-pooblaščencu/informacijska-pooblaščenka">Information Commissioner</a></li><li> <a href="o-pooblaščencu/vodstvo">Leadership</a></li><li> <a href="o-pooblaščencu/generalna-sekretarka">Secretary General</a></li><li> <a href="o-pooblaščencu/zaposleni/">Employees</a></li><li> <a href="o-pooblaščencu/informacije-javnega-značaja/">Public information</a></li><li> <a href="o-pooblaščencu/uporabne-povezave">Useful links</a></li><li> <a href="o-pooblaščencu/mednarodno-delovanje-informacijskega-pooblaščenca/">International operation of the Information Commissioner</a></li></ul></li></ul><select id="mobileNav"><option><option  class="first"> <a href="/">Home</a></option><option > <a href="novice/">News</a></option><option> <a href="zakonodaja/">Legislation</a><option><option> <a href="zakonodaja/ustava">Constitution</a></option><option> <a href="zakonodaja/reforma-evropskega-zakonodajnega-okvira-za-varstvo-osebnih-podatkov/">Reform of the European legislative framework for the protection of personal data</a></option><option> <a href="zakonodaja/zakon-o-informacijskem-pooblaščencu">Information Commissioner Act</a></option><option> <a href="zakonodaja/zakon-o-varstvu-osebnih-podatkov/">Law on Protection of Personal Data</a></option><option> <a href="zakonodaja/zakon-o-dostopu-do-informacij-javnega-značaja/">Access to Public Information Act</a></option><option> <a href="zakonodaja/zakon-o-inšpekcijskem-nadzoru">Inspection Act</a></option><option> <a href="zakonodaja/zakon-o-splošnem-upravnem-postopku">The Law on General Administrative Procedure</a></option><option> <a href="zakonodaja/zakon-o-varstvu-osebnih-podatkov-na-področju-obravnavanja-kaznivih-dejanj">Personal Data Protection Act in the field of criminal proceedings</a></option><option> <a href="zakonodaja/drugi-zakoni">Other laws</a></option><option> <a href="zakonodaja/pripombe-informacijskega-pooblaščenca-na-predloge-predpisov/">Comments of the Information Commissioner on draft regulations</a></option><option> <a href="zakonodaja/mednarodni-predpisi">International regulations</a></option></option></option><option> <a href="obrazci/">Forms</a><option><option> <a href="obrazci/varstvo-osebnih-podatkov/">Protection of personal data</a></option><option> <a href="obrazci/obrazci-s-področja-pacientovih-pravic">Patients&#39; rights</a></option><option> <a href="obrazci/obrazci-s-področja-dostopa-do-informacij-javnega-značaja/">Public information</a></option><option> <a href="obrazci/obrazci-za-medije">Information for the media</a></option></option></option><option> <a href="publikacije/">Publications</a><option><option> <a href="publikacije/letna-poročila/">Annual reports</a></option><option> <a href="publikacije/priročniki-in-smernice/">Manuals and guidelines</a></option><option> <a href="publikacije/poročila">Reports</a></option><option> <a href="publikacije/multimedija">Multimedia</a></option><option> <a href="publikacije/infografike">Infographics</a></option></option></option><option> <a href="o-pooblaščencu/">About the trustee</a><option><option> <a href="o-pooblaščencu/osebna-izkaznica">ID card</a></option><option> <a href="o-pooblaščencu/zgodovina-informacijskega-pooblaščenca">History</a></option><option> <a href="o-pooblaščencu/pristojnosti/">Responsibilities</a></option><option> <a href="o-pooblaščencu/informacijska-pooblaščenka">Information Commissioner</a></option><option> <a href="o-pooblaščencu/vodstvo">Leadership</a></option><option> <a href="o-pooblaščencu/generalna-sekretarka">Secretary General</a></option><option> <a href="o-pooblaščencu/zaposleni/">Employees</a></option><option> <a href="o-pooblaščencu/informacije-javnega-značaja/">Public information</a></option><option> <a href="o-pooblaščencu/uporabne-povezave">Useful links</a></option><option> <a href="o-pooblaščencu/mednarodno-delovanje-informacijskega-pooblaščenca/">International operation of the Information Commissioner</a> </option></option></option></option></select></nav><!--
On 2 March 2021, we received your request from the Information Commissioner (IP) for an opinion on whether it is permissible for a kindergarten to request information on the child's health status and vaccination status in the application for enrollment of a child (ie before admission and inclusion). You have attached a sample of such an application from your municipality.
    tplOuter - Meni wrapper
 
    tpl - single vrednosti menija
On the basis of the information you have provided to us, in accordance with Article 58 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data Directive 95/46 / EC (hereinafter: the General Regulation on Data Protection), point 7 of the first paragraph of Article 49 of the Personal Data Protection Act (Official Gazette of the Republic of Slovenia, No. 94/07-UPB1, hereinafter ZVOP-1) and Article 2 of the Information Commissioner Act (Official Gazette of the Republic of Slovenia, No. 113/05, hereinafter ZInfP) provides our non-binding opinion on your issue. We also explain that the IP, outside the inspection procedure, is not competent to assess the internal acts of the municipality or educational organizations.
    tplParentRow - vrednosti menija, ki imajo podvrednosti
 
    tplInner - Podmeni kontejner
Data retrieval:
    tplInnerRow - vsebina podmeni kontejnerja
 
    --></div></header><div class="slider"><div id="heroImage"><img src="assets/images/banners/vop_banner2.jpg" width="1160" height="200" alt="dekorativna slika" title="Legislation" /></div></div><div class="page pr"><div class="row"><nav class="c3 sideNav"><ul class=""><li class="first"> <a href="/" >Home</a></li><li> <a href="novice/" >News</a></li><li> <a href="zakonodaja/" >Legislation</a></li><li> <a href="obrazci/" >Forms</a></li><li> <a href="publikacije/" >Publications</a></li><li class="last"> <a href="o-pooblaščencu/" >About the trustee</a> </li></ul><!--
- on the child's health and developmental characteristics, knowledge of which is essential for the child's safety and work with the child, and
                    &selfClass Class for the current document in the menu.
 
                    &hereClass Class for the active menu item and its parents. Default: active
- whether the child has been vaccinated,
                    &innerClass Class for inner submenu wrappers.
 
                    &top=`3` Število podmenijou ki je prikazuje
it is not appropriate already in the phase of submitting an application for enrollment in kindergarten.
                    --></nav><article class="c9"><header class="pr"><h1> Data on vaccination and health status on the application for enrollment of a child in kindergarten</h1> <i class="fa fa-font" id="zoomIn">+</i> <i class="fa fa-font" id="zoomOut">-</i><a href="javascript:window.print()"><i class="fa fa-print" id="print"></i></a></header> <b>Date:</b> 19.03.2021<br> <b>Number:</b> 07121-1 / 2021/540<br> <b>Categories:</b> Kindergarten<br><p> <em>On 2 March 2021, we received your request from the Information Commissioner (IP) for an opinion on whether it is permissible for a kindergarten to request information on the child&#39;s health status and vaccination status in the application for enrollment (ie before admission and inclusion). You have attached a sample of such an application from your municipality.</em></p><p></p><p> On the basis of the information you have provided to us, in accordance with Article 58 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data Directive 95/46 / EC (hereinafter: the General Regulation on Data Protection), point 7 of the first paragraph of Article 49 of the Personal Data Protection Act (Official Gazette of the Republic of Slovenia, No. 94/07-UPB1, hereinafter ZVOP-1) and Article 2 of the Information Commissioner Act (Official Gazette of the Republic of Slovenia, No. 113/05, hereinafter ZInfP) provides our non-binding opinion on your issue. We also explain that the IP, outside the inspection procedure, is not responsible for assessing the internal acts of the municipality or educational organizations. </p><p></p><p><strong>&nbsp;</strong></p><p> <strong>Data retrieval:</strong></p><p> <strong>- on the child&#39;s health and developmental characteristics, knowledge of which is essential for the child&#39;s safety and work with the child, and</strong></p><p> <strong>- whether the child has been vaccinated,</strong></p><p> <strong><u>it is not appropriate already in the phase of submitting an application for enrollment</u></strong> <strong>in kindergarten.</strong> </p><p><strong>&nbsp;</strong></p><p> <strong>Obtaining information on the fact that it is a child with special needs together with an individual plan, opinion of the CSD or the minutes of the center <u>is permissible already at the stage of submitting the application for enrollment</u> .</strong> </p><p><strong>&nbsp;</strong></p><p> <strong>Later, <u>at the stage of inclusion in the kindergarten, it is permissible to</u> collect all the above data, including evidence.</strong> </p><p><strong>&nbsp;</strong></p><p><strong>&nbsp;</strong></p><p> <strong>Explanation:</strong> </p><p><strong>&nbsp;</strong></p><p> All considered personal data are relevant and may be collected by the kindergarten, because there are legal grounds for this:</p><ul><li> the basis for data on vaccination and non-vaccination is in Article 51.a of the Infectious Diseases Act (ZNB) and in the eighth paragraph of Article 20 of the Kindergartens Act (ZVrt);</li><li> for data on a child with special needs, the basis is in the sixth paragraph of Article 20 of the ZVrt, if the parents also submit an individual plan of assistance to the family or the minutes of the center for early treatment or the opinion of the center for social work on endangerment due to social status. It is also based on the Orientation of Children with Special Needs Act (ZUOPP-1) and the Integrated Early Treatment of Preschool Children with Special Needs Act (ZOPOPP);</li><li> for health data that are important for work with children and safety is the basis in the eighth paragraph of Article 20 and the third paragraph of Article 44 of the ZVrt and in Article 5 of the Rules on the collection and protection of personal data in the field of preschool education.</li></ul><p></p><p> The difference is only in the time or phase in which certain data are collected. <u>The principle of minimum data coverage</u> under Article 5 (1) (c) of the General Data Protection Regulation requires that personal data be relevant, relevant and limited to what is necessary for the purposes for which they are processed.</p><p></p><p> In the phase of collecting applications for enrollment of children and deciding on admission, <u>there is no need</u> to obtain data on vaccinations and health specialties, because these two data according to the above regulations should not affect (not a criterion) the ranking. Only in the phase of final inclusion (conclusion of a contract) in the kindergarten are data on the relevant health condition and vaccination important. If the municipality has prescribed an application form requesting information on the relevant health condition and vaccination, the parents of this part, according to the IP, are not obliged to fill it out, but must do so later if the child is actually admitted to kindergarten.</p><p></p><p> It is different if it is a child with special needs, because this fact affects the inclusion in the list or gives a certain advantage in enrollment. In this part, the application for registration complies with the principle of minimum data size. </p><p><strong>&nbsp;</strong></p><p> Kind regards,</p><p></p><p></p><p> Prepared:</p><p> mag. Urban Brulc, Univ. dipl. right.</p><p> independent IP consultant</p><p></p><p></p><p> Mojca Prelesnik, B.Sc. dipl. right.</p><p> Information Commissioner</p><p></p><p></p></article></div></div><footer><div class="row"><address class="c3"> <strong class="title">ABOUT US</strong><p class="bodytext"> <strong>Information Commissioner</strong></p><p class="bodytext"> <strong>Dunajska cesta 22</strong></p><p class="bodytext"> <strong>1000 Ljubljana, Slovenia</strong></p><p class="bodytext"></p><p class="bodytext"> <a href="https://zemljevid.najdi.si/podjetje/1867571000/informacijski-pooblascenec" title="Initiates file download">Map</a> (source: najdi.si)</p><p class="bodytext"> T: 01 230 97 30<br /> F: 01 230 97 78</p><p class="bodytext"> E-mail: <a href="javascript:linkTo_UnCryptMailto('iwehpk6cl:elWel9no:oe');">gp.ip (at) ip-rs.si</a><br /> Reporting violations: <a href="zakonodaja/reforma-evropskega-zakonodajnega-okvira-za-varstvo-osebnih-podatkov/ključna-področja-uredbe/prijava-kršitev-varnosti" target="_blank">instructions and form</a></p></address><div class="c3"> <strong class="title">OFFICE HOURS</strong><p class="bodytext"> <strong>MON - FRI</strong></p><p class="bodytext"> 10.00 - 12.00 and 14.00 - 15.00</p><p class="bodytext"></p><p class="bodytext"> A personal visit is only possible with prior notice to the above e-mail address or telephone number.</p></div><div class="c3 h1"> <strong class="title">LINKS</strong><!--  CONTENT ELEMENT, uid:1350/html [begin] --><div id="c1350" class="csc-frame csc-frame-default"><!--  Raw HTML content: [begin] --><p> <a href="informacije-javnega-značaja/">Public information</a></p><p> <a href="publikacije/priročniki-in-smernice/" title="In the guidelines, personal file managers can find answers to the most frequently asked questions in each area of personal data protection. The guidelines also provide quick guides, checklists, and examples of good and bad practice.">Manuals and guidelines</a></p><p> <a href="obrazci/varstvo-osebnih-podatkov/" title="Forms">Forms</a></p><p> <a href="o-pooblaščencu/informacije-javnega-značaja/o-spletni-strani" title="About the website">Privacy policy</a></p><p> <a href="o-pooblaščencu/informacije-javnega-značaja/informacije-o-obdelavi-osebnih-podatkov" title="About the website">Information on the processing of personal data</a></p><p> <a href="o-pooblaščencu/informacije-javnega-značaja/izjava-o-dostopnosti" title="Accessibility statement">Accessibility statement</a></p><p> <a href="https://www.upravljavec.si" target="_blank">Support for small businesses</a></p><p> <a href="https://www.tiodlocas.si" target="_blank">Rights of individuals</a> </p><!--  Raw HTML content: [end] --></div><!--  CONTENT ELEMENT, uid:1350/html [end] --></div><div class="c3 pr"><div class="h1"><strong class="title"></strong><div class="cb-textpic" id="cb1351"><a name="c1351"></a><div class="cb-center cb-ic2 layout0"></div><p class="bodytext"> Telephone counseling in the field of personal data protection takes place within the project &quot;Justice, Equality and Citizenship Program 2014-2020&quot;, funded by the European Union. </p><p class="bodytext"><img height="44" src="https://www.ip-rs.si/fileadmin/_processed_/d/7/csm_iDecide_Logo_breznapisa_nogastrani_e14a48342f.png" width="220" /></p></div></div></div></div></footer></div><script src="assets/js/scripts.min.js" type="text/javascript"></script><!-- <script src="https://www.ip-rs.si/typo3conf/ext/t3colorbox/Resources/Public/JavaScript/jquery.colorbox-1.5.13.min.js?1501572991" type="text/javascript"></script> --><!-- <script src="https://www.ip-rs.si/typo3conf/ext/pxa_survey/Resources/Public/JavaScript/Survey.js?1573637584" type="text/javascript"></script> --><!-- <script src="https://www.ip-rs.si/typo3conf/ext/pxa_survey/Resources/Public/JavaScript/pxa_survey.js?1573637584" type="text/javascript"></script> --><!-- <script src="https://www.ip-rs.si/typo3temp/assets/js/2619955b93.js?1597648248" type="text/javascript"></script> --></body></html>
 
Obtaining information on the fact that it is a child with special needs together with an individual plan, opinion of the CSD or the minutes of the center is permissible already at the stage of submitting the application for enrollment .
 
Later, at the stage of inclusion in the kindergarten, it is permissible to collect all the above data, including evidence.
 
Explanation:
 
All considered personal data are relevant and may be collected by the kindergarten, because there are legal grounds for this:
 
* the basis for data on vaccination and non-vaccination is in Article 51.a of the Infectious Diseases Act (ZNB) and in the eighth paragraph of Article 20 of the Kindergartens Act (ZVrt);
* for data on a child with special needs, the basis is in the sixth paragraph of Article 20 of the ZVrt, if the parents also submit an individual plan of assistance to the family or the minutes of the center for early treatment or the opinion of the center for social work on endangerment due to social status. It is also based on the Orientation of Children with Special Needs Act (ZUOPP-1) and the Integrated Early Treatment of Preschool Children with Special Needs Act (ZOPOPP);
* for health data that are important for work with children and safety is the basis in the eighth paragraph of Article 20 and the third paragraph of Article 44 of the ZVrt and in Article 5 of the Rules on the collection and protection of personal data in the field of preschool education.
 
The difference is only in the time or phase in which certain data are collected. The principle of minimum data coverage under Article 5 (1) (c) of the General Data Protection Regulation requires that personal data be relevant, relevant and limited to what is necessary for the purposes for which they are processed.
 
In the phase of collecting applications for enrollment of children and deciding on admission, there is no need to obtain data on vaccinations and health specialties, because these two data according to the above regulations should not affect (not a criterion) the ranking. Only in the phase of final inclusion (conclusion of a contract) in the kindergarten are data on the relevant health condition and vaccination important. If the municipality has prescribed an application form requesting information on the relevant health condition and vaccination, the parents of this part, according to the IP, are not obliged to fill it out, but must do so later if the child is actually admitted to kindergarten.  
 
It is different if it is a child with special needs, because this fact affects the inclusion in the list or gives a certain advantage in enrollment. In this part, the application for registration complies with the principle of minimum data size.
 
Kind regards,
</pre>
</pre>

Latest revision as of 08:16, 7 April 2021

IP - 07121-1/2021/540
LogoSI.png
Authority: IP (Slovenia)
Jurisdiction: Slovenia
Relevant Law: Article 5(1)(c) GDPR
Art. 20 Kindergartens Act
Art. 51.a Communicable Diseases Act
Type: Advisory Opinion
Outcome: n/a
Started:
Decided: 19.03.2021
Published: 19.03.2021
Fine: None
Parties: n/a
National Case Number/Name: 07121-1/2021/540
European Case Law Identifier: n/a
Appeal: n/a
Original Language(s): Slovenian
Original Source: IP (in SL)
Initial Contributor: GDPR plus

The Slovenian DPA stated that obtaining information on the child's health and developmental characteristics, knowledge of which is necessary for the child's safety and work with the child, and on whether the child has been vaccinated, is not appropriate at the stage of submitting an application for enrollment in kindergarten.

English Summary

Facts

Question: is it permissible for a kindergarten to ask for information about a child's health and immunisation status as early as the child's application for admission (i.e., before admission). You have attached a sample of such an application from your municipality.

Dispute

Holding

Obtaining information on the child's health and developmental characteristics, knowledge of which is necessary for the child's safety and work with the child, and on whether the child has been vaccinated, is not appropriate at the stage of submitting an application for enrollment in kindergarten.

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the Slovenian original. Please refer to the Slovenian original for more details.

On 2 March 2021, we received your request from the Information Commissioner (IP) for an opinion on whether it is permissible for a kindergarten to request information on the child's health status and vaccination status in the application for enrollment of a child (ie before admission and inclusion). You have attached a sample of such an application from your municipality.

On the basis of the information you have provided to us, in accordance with Article 58 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data Directive 95/46 / EC (hereinafter: the General Regulation on Data Protection), point 7 of the first paragraph of Article 49 of the Personal Data Protection Act (Official Gazette of the Republic of Slovenia, No. 94/07-UPB1, hereinafter ZVOP-1) and Article 2 of the Information Commissioner Act (Official Gazette of the Republic of Slovenia, No. 113/05, hereinafter ZInfP) provides our non-binding opinion on your issue. We also explain that the IP, outside the inspection procedure, is not competent to assess the internal acts of the municipality or educational organizations.

Data retrieval:

- on the child's health and developmental characteristics, knowledge of which is essential for the child's safety and work with the child, and

- whether the child has been vaccinated,

it is not appropriate already in the phase of submitting an application for enrollment in kindergarten.

Obtaining information on the fact that it is a child with special needs together with an individual plan, opinion of the CSD or the minutes of the center is permissible already at the stage of submitting the application for enrollment .

Later, at the stage of inclusion in the kindergarten, it is permissible to collect all the above data, including evidence.

Explanation:

All considered personal data are relevant and may be collected by the kindergarten, because there are legal grounds for this:

* the basis for data on vaccination and non-vaccination is in Article 51.a of the Infectious Diseases Act (ZNB) and in the eighth paragraph of Article 20 of the Kindergartens Act (ZVrt);
* for data on a child with special needs, the basis is in the sixth paragraph of Article 20 of the ZVrt, if the parents also submit an individual plan of assistance to the family or the minutes of the center for early treatment or the opinion of the center for social work on endangerment due to social status. It is also based on the Orientation of Children with Special Needs Act (ZUOPP-1) and the Integrated Early Treatment of Preschool Children with Special Needs Act (ZOPOPP);
* for health data that are important for work with children and safety is the basis in the eighth paragraph of Article 20 and the third paragraph of Article 44 of the ZVrt and in Article 5 of the Rules on the collection and protection of personal data in the field of preschool education.

The difference is only in the time or phase in which certain data are collected. The principle of minimum data coverage under Article 5 (1) (c) of the General Data Protection Regulation requires that personal data be relevant, relevant and limited to what is necessary for the purposes for which they are processed.

In the phase of collecting applications for enrollment of children and deciding on admission, there is no need to obtain data on vaccinations and health specialties, because these two data according to the above regulations should not affect (not a criterion) the ranking. Only in the phase of final inclusion (conclusion of a contract) in the kindergarten are data on the relevant health condition and vaccination important. If the municipality has prescribed an application form requesting information on the relevant health condition and vaccination, the parents of this part, according to the IP, are not obliged to fill it out, but must do so later if the child is actually admitted to kindergarten. 

It is different if it is a child with special needs, because this fact affects the inclusion in the list or gives a certain advantage in enrollment. In this part, the application for registration complies with the principle of minimum data size.

Kind regards,