The Attendance App and Student Privacy
A school introduces an attendance app that students install on their own phones. It records when a student enters school grounds using a short-range wireless signal, and stores the time and student ID on a central server. The school says this will replace roll call and save teachers 10 minutes per class. Some students object that the app reveals when they arrive and leave. The school has not published a privacy policy or said how long records are kept. A parent asks whether the app can be used without tracking. The school must decide whether to proceed, modify, or abandon the app.
1. Identify the stakeholders and one key concern for each.
Read the worked answer
Stakeholders include students, whose movement is recorded and who may feel surveilled; teachers, who save time but may become dependent on the data; parents, who want to know how their child's data is used; the school, which must meet its duty of care and legal obligations; and the app vendor, which may want the data. Each concern is different: students care about privacy and autonomy, teachers about workload, parents about consent and retention, and the school about compliance and reputation. A decision that satisfies only the school's efficiency goal ignores the others, so the analysis must weigh them together rather than treating time saved as the only benefit.
2. The school argues that because attendance is already recorded, the app collects nothing new. Evaluate this argument.
Read the worked answer
The argument is weak because it compares the purpose, not the data. Roll call records whether a student is present, typically once per class. The app records arrival and departure times continuously, which reveals patterns such as lateness, early leaving, and movement around the grounds. That is more detailed data about the same students, and it can be used for purposes beyond attendance. Even if the data type is familiar, the granularity and the potential uses are new. The argument would only hold if the app recorded the same information at the same level of detail, which it does not. The school should assess the actual data collected, not the label attached to it.
3. Recommend a decision and justify it using the concerns identified.
Read the worked answer
The school should modify rather than proceed unchanged or abandon. Proceeding unchanged ignores the missing privacy policy, unclear retention, and student objection, all of which create legal and trust risks. Abandoning loses a real benefit, since teachers save time. A modified approach would publish a clear policy, state a retention period, limit data to attendance only, offer an opt-out such as a card tap, and give students and parents a way to see and correct their data. This addresses the main concerns while keeping the efficiency gain. The judgement is that the decision should be proportionate: collect the minimum data needed, be transparent, and allow alternatives.