Serves schools or universities, in Malta

Processing of Personal Data (Education Sector) Regulations (Subsidiary Legislation 586.07), reg. 8 · Read the law's page

• When processing personal data for research and statistics purposes in the education sector, render all identifiable data anonymous, unless for research the identification of the data subject is required to fulfil the purposes of the research (S.L. 586.07, regulation 8(1)).
• Where research for a specific targeted policy would require students' identification details, replace personal identification data with pseudonymous data, and limit re-identification of students to the cases that specifically fall within the parameters of the targeted policy (S.L. 586.07, regulation 8(2)).
• When processing pseudonymous data under regulation 8, keep data enabling the attribution of information to an identified or identifiable data subject separately from the other data (S.L. 586.07, regulation 8(4)(b)).
• After the targeted policy or initiative has been implemented, render all identifiable details anonymous, delete them or destroy them, and do not retain personal data longer than necessary (S.L. 586.07, regulation 8(4)(d)).