## Case 1: Student directory

Every year, a completely new group of students. How will you remember the names of each and every person? A 'student directory' is still a common method used for this purpose. Just print out the names and photos of the students and, voilà, you will always have everyone 'at hand'.

### What is the situation?

In this case, an educator has created a student directory. Not only has he included the names of the students, but he has also penned some notes about each student, e.g. study results, specific details and interests. The educator hopes that this information will help him get to know the students faster and better.

### What happened?

The educator loses the student directory while travelling on public transport. Because he had written his name and email address on the first page, he was fortunate enough to have it returned to him by an alert finder later that week. As the student directory was only 'lost’ for a relatively short period of time, he decides not to report the incident internally or to inform the students about it.

### What does the GDPR say about this?

See if you can answer the questions below. This will show you how much you already know about the GDPR:

After completing the exercise, click the arrow at the bottom right to go to the next page.