GPS Tablets and Student Privacy
A town in Shimane Prefecture with 28,000 residents has a 65-and-over share of 31%. The board of education proposes giving tablets to all 2,300 elementary and junior high school students. Each tablet has GPS and an alert function that notifies parents if a child enters a designated danger zone near a river. The town also wants to use anonymous location data to plan school bus routes. Some parents support the plan because the town has had two child drowning accidents in five years. Others argue that continuous location tracking violates privacy and that the data could be used for other purposes. The proposal says data will be stored for one year, but the contract with the private company is not public. The town assembly must decide whether to approve the plan. National law protects personal information, and the Constitution guarantees the right to life, liberty, and the pursuit of happiness (Article 13) and secrecy of communications (Article 21).
1. Does the GPS tracking conflict with Article 13? Apply a necessity-and-proportionality test rather than giving a yes/no answer.
Read the worked answer
Article 13 protects privacy as part of the right to life, liberty, and pursuit of happiness; location data on children is personal information. The tracking is not automatically unconstitutional. The analysis should ask: is the purpose legitimate? Yes, child safety. Is the means necessary and proportionate? Continuous GPS on all 2,300 students is broader than the two drowning accidents require. A danger-zone alert could work without storing a full movement history. The one-year storage and private contract increase the risk of misuse. Article 21's secrecy of communications may apply if the data reveal messages or associations, but the main issue is privacy. A court would likely require a legal basis, clear purpose, minimal collection, and independent oversight. The board should prefer the least intrusive design: alerts only when a child enters a zone, no continuous map, and deletion after a short period.
2. Propose three safeguards that would make the plan more acceptable. Explain how each responds to a specific risk in the setup.
Read the worked answer
First, data minimization: collect only a danger-zone entry signal, not continuous location; store no more than 30 days unless an incident occurs. This responds to the one-year retention and the risk of a detailed movement history. Second, transparency and consent: publish the contract, hold parent meetings, allow opt-out with a non-GPS alternative, and obtain consent for minors. This responds to the secret private contract. Third, independent oversight: a joint committee of parents, teachers, and the town's privacy officer reviews access logs and audits the company. Fourth, purpose limitation: bus-route planning should use anonymous, aggregated data that cannot identify a child. Fifth, security: encryption, access controls, and a ban on sale or secondary use. These safeguards target the specific risks-private contract, long storage, and function creep-rather than just saying 'protect privacy'.
3. If the assembly approves the plan, what legal and oversight conditions should it attach? Discuss one equity issue as well.
Read the worked answer
If approved, the assembly should require a written agreement with the company, a data protection impact assessment, and reporting to the assembly. The contract should be public except for genuine trade secrets. The town needs a legal basis under the Personal Information Protection Act and its own ordinance; it should specify retention, deletion, and breach notification. Parents should have a complaints route. The board should also address equity: a tablet-only system may disadvantage students who cannot afford devices or connectivity, so a loaner and offline alternative are needed. Finally, the assembly should separate the safety function from the bus-planning use; linking them may exceed the original purpose. Approving the plan without these conditions would make the privacy objection stronger.