Returns and inspection evidence are generated from operational records rather than compiled separately, and learner data is not used to train general-purpose AI models. The school remains the data controller.
Inspection and licensing
- NaSIA licensing & inspection — registration and licensing requirements, the Inspection Evaluation Framework, unannounced inspection, and the records a school should be able to produce on the day.
Reporting
- GES & EMIS reporting — enrolment, attendance, staffing, infrastructure and performance data structured for census returns, generated from the same records that run the school.
Data protection
- Data Protection Act 843 — why your school is a data controller, the registration obligation under section 27(1), the Commission’s 2026 move toward enforcement, and how Edves handles learner data.
Teachers
- NTC licensing & CPD — what actually changed about the licensure examination, the December 2026 deadline for unlicensed teachers, and the records schools need to manage it.
The question to ask first
Ask any supplier whether they are the data controller or the data processor. Under Act 843 the school is the controller and the supplier is the processor, and the school’s obligations to learners and families do not transfer. A supplier claiming their compliance covers yours has either misunderstood the allocation or is hoping you have.
Related
AI in education sets out an adoption sequence that survives scrutiny. Choosing school software lists the compliance questions to put to any supplier, including this one.