[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"blog-article-polityka-zberihannia-navchalnykh-danykh":3},{"uuid":4,"title":5,"subtitle":6,"content":7,"preview":483,"date_published":489,"date_pinned":489,"img":490,"alias":491,"is_published":492,"is_pinned":493,"type":13,"category":494,"category_name":495,"category_alias":496,"background_color":497,"preview_icon":13,"category_value":498,"external_link":13},"0a9efa42-0bc0-4c5a-922a-98e9448660e8","What Is a Learning Data Retention Policy, and How Do You Prepare One?","How to define which data an online school keeps, why, and for how long. Responsibilities, backups, and verifying deletion.",{"type":8,"content":9},"doc",[10,18,23,28,36,41,53,59,64,69,75,80,93,99,104,109,115,120,125,131,136,141,147,152,157,163,168,173,179,184,189,195,200,205,211,216,221,227,232,237,243,248,253,259,264,269,275,280,285,291,296,301,307,312,317,323,328,333,339,344,349,355,360,365,371,376,381,387,392,397,403,408,413,419],{"type":11,"attrs":12,"content":14},"paragraph",{"align":13},null,[15],{"text":16,"type":17},"Student data does not disappear when a course ends. Assignments and grades remain in the learning account, comments in a mentor's spreadsheet, meeting recordings in a video service, emails in inboxes, and earlier versions in backups. Even a small school may not know how many copies of one student's answer still exist a year later.","text",{"type":11,"attrs":19,"content":20},{"align":13},[21],{"text":22,"type":17},"A retention policy manages this lifecycle. It connects each data category with a purpose, justified period, storage location, and responsible person. It should be a working agreement the team can fulfill rather than a website-footer promise contradicting actual practice.",{"type":11,"attrs":24,"content":25},{"align":13},[26],{"text":27,"type":17},"Ukrainian schools should check baseline requirements against applicable law and their own contracts. Activities also falling under GDPR or other regimes need separate assessment. Below is a process for organizing the work; its examples do not establish universal legal periods for every education project.",{"type":29,"attrs":30,"content":33},"heading",{"align":13,"level":31,"id":32},2,"heading_2_1",[34],{"text":35,"type":17},"Distinguish Need from the Habit of Accumulating",{"type":11,"attrs":37,"content":38},{"align":13},[39],{"text":40,"type":17},"Ask which specific task each retained item serves. Contacts enable access and communication, assignments assessment and feedback, session recordings agreed viewing, and payment documents the relevant accounting. ‘It might be useful someday’ does not define a purpose precisely enough and gradually creates an unmanaged archive.",{"type":11,"attrs":42,"content":43},{"align":13},[44,51],{"text":45,"type":17,"marks":46},"The Law of Ukraine ‘On Personal Data Protection’",[47],{"type":48,"attrs":49},"link",{"href":50,"title":13},"https:\u002F\u002Fzakon.rada.gov.ua\u002Flaws\u002Fshow\u002F2297-17",{"text":52,"type":17}," connects the scope and duration of processing to lawful purposes. In practice, review the need when a purpose changes or ends. However, video-course access, accounting document retention, and disputed assessment reviews can have different grounds. Do not combine them into one date merely for a convenient spreadsheet.",{"type":29,"attrs":54,"content":56},{"align":13,"level":31,"id":55},"heading_2_2",[57],{"text":58,"type":17},"Map Storage Locations",{"type":11,"attrs":60,"content":61},{"align":13},[62],{"text":63,"type":17},"Begin with the actual data journey. Students register through a form, receive email, submit files, ask questions, and attend meetings. Identify the system, person, and possible copies at every step. Teachers' personal laptops, contractors' shared folders, and exported spreadsheets belong on the map alongside the main platform.",{"type":11,"attrs":65,"content":66},{"align":13},[67],{"text":68,"type":17},"Do not ask the team to describe every technical detail immediately. First list services and routine operations, then check settings and contracts. The most important discovery is often an old recording folder still accessible to former staff rather than a complex server. The map should lead to action: revoke unnecessary access, assign owners, and remove needless duplication.",{"type":29,"attrs":70,"content":72},{"align":13,"level":31,"id":71},"heading_2_3",[73],{"text":74,"type":17},"Create a Register with a Few Fields",{"type":11,"attrs":76,"content":77},{"align":13},[78],{"text":79,"type":17},"For each category, record its purpose, grounds, location, access, retention-trigger event, review rule, and final action. Add an owner and a verification method. For example, final work is retained for assessment and agreed appeals; after the required period, it is deleted or appropriately anonymized if another justified purpose exists.",{"type":11,"attrs":81,"content":82},{"align":13},[83,85,91],{"text":84,"type":17},"Do not make the register a copy of the student database. It describes information types and rules rather than containing every personal record. The ",{"text":86,"type":17,"marks":87},"ICO's guidance on storage limitation",[88],{"type":48,"attrs":89},{"href":90,"title":13},"https:\u002F\u002Fico.org.uk\u002Ffor-organisations\u002Fuk-gdpr-guidance-and-resources\u002Fdata-protection-principles\u002Fa-guide-to-the-data-protection-principles\u002Fstorage-limitation\u002F",{"text":92,"type":17}," describes such a schedule as a practical management tool. This is a UK regulatory context that can provide an organizational reference while your own legal requirements are checked separately.",{"type":29,"attrs":94,"content":96},{"align":13,"level":31,"id":95},"heading_2_4",[97],{"text":98,"type":17},"Choose the Event That Starts the Period",{"type":11,"attrs":100,"content":101},{"align":13},[102],{"text":103,"type":17},"‘We retain data for a certain period’ is incomplete without a starting point. Registration, last login, course completion, final assessment, and contract closure are different events. Counting from the last login may let an incidental action extend retention indefinitely. Counting from registration risks active students losing necessary information midcourse.",{"type":11,"attrs":105,"content":106},{"align":13},[107],{"text":108,"type":17},"For each category, choose an event connected to its purpose. Account separately for pauses, continued learning, and unresolved disputes. Administrators need to understand what to check and which record confirms the date. If the starting point cannot be reliably determined, automatic deletion is premature.",{"type":29,"attrs":110,"content":112},{"align":13,"level":31,"id":111},"heading_2_5",[113],{"text":114,"type":17},"Separate Profiles from Learning Outcomes",{"type":11,"attrs":116,"content":117},{"align":13},[118],{"text":119,"type":17},"A user profile may remain active across programs while one course has ended. Not every assignment needs indefinite retention simply because someone still uses the school. Conversely, closing one product's access does not necessarily mean immediately deleting records required for other ongoing relationships.",{"type":11,"attrs":121,"content":122},{"align":13},[123],{"text":124,"type":17},"Describe connections between profiles, purchases, learning actions, and issued documents. Define what can be reduced after completion and what is needed to confirm an outcome. This avoids choosing between retaining everything and destroying a history the school has a justified need to maintain with one click.",{"type":29,"attrs":126,"content":128},{"align":13,"level":31,"id":127},"heading_2_6",[129],{"text":130,"type":17},"Assess Student Files Separately",{"type":11,"attrs":132,"content":133},{"align":13},[134],{"text":135,"type":17},"Assignments may contain information about employers, clients, health, finances, or other people. Even when only a professional example is requested, students sometimes send real documents with unnecessary detail. Explain preparation rules before submission and offer learning data where real data is unnecessary.",{"type":11,"attrs":137,"content":138},{"align":13},[139],{"text":140,"type":17},"Give files their own path: review, revision, appeal, and eventual deletion. Teachers should not keep personal archives of others' work for future examples. Learning or advertising use requires separate analysis of rights and permissions. Assessment completion does not turn work into a freely available school resource.",{"type":29,"attrs":142,"content":144},{"align":13,"level":31,"id":143},"heading_2_7",[145],{"text":146,"type":17},"Meeting Recordings Need a Different Approach",{"type":11,"attrs":148,"content":149},{"align":13},[150],{"text":151,"type":17},"A video contains more than a teacher's explanation. Faces, voices, names, chat, and accidentally shared screens may appear. Determine whether the full recording is necessary for the stated purpose. A separate explanation without student discussions or a short resource prepared afterward may suffice.",{"type":11,"attrs":153,"content":154},{"align":13},[155],{"text":156,"type":17},"Agree on the viewing audience, duration, and access method before recording. If an editor receives recordings, check working terms and subsequent deletion of source copies. Do not leave a link open indefinitely because it once suited one group. Changing audiences may change the legal and ethical context too.",{"type":29,"attrs":158,"content":160},{"align":13,"level":31,"id":159},"heading_2_8",[161],{"text":162,"type":17},"Messages Are Data Too",{"type":11,"attrs":164,"content":165},{"align":13},[166],{"text":167,"type":17},"Support chats accumulate questions, screenshots, and personal explanations of students' circumstances. Teams need this information to resolve inquiries but not necessarily to retain every conversation indefinitely. Distinguish working correspondence, necessary evidence of agreements, and material removable after a task ends.",{"type":11,"attrs":169,"content":170},{"align":13},[171],{"text":172,"type":17},"Support analytics often need only a problem category, response time, and resolution status. Do not copy every full inquiry into another spreadsheet. To improve programs using questions, formulate anonymized learning findings. This preserves usefulness while reducing personal copies requiring future control.",{"type":29,"attrs":174,"content":176},{"align":13,"level":31,"id":175},"heading_2_9",[177],{"text":178,"type":17},"Separate Financial Documents",{"type":11,"attrs":180,"content":181},{"align":13},[182],{"text":183,"type":17},"Payment and accounting documents may have their own statutory periods and requirements. Determine these with an accountant or lawyer according to the business structure and transaction types. Do not apply one accounting-archive rule to the whole learning database. Needing an invoice does not justify keeping every student screenshot.",{"type":11,"attrs":185,"content":186},{"align":13},[187],{"text":188,"type":17},"Separate systems and access organizationally: mentors do not need the whole financial archive, while accountants do not need personal assignment comments. Check default export fields. One unnecessary column can turn a routine file into a dataset whose access the team never intended to expand.",{"type":29,"attrs":190,"content":192},{"align":13,"level":31,"id":191},"heading_2_10",[193],{"text":194,"type":17},"Do Not Forget Completion Documents",{"type":11,"attrs":196,"content":197},{"align":13},[198],{"text":199,"type":17},"Schools may have a justified need to confirm program completion after access ends. This does not always require every intermediate draft, message, and class recording. Define the minimum information needed to verify an issued document and explain that practice to participants separately.",{"type":11,"attrs":201,"content":202},{"align":13},[203],{"text":204,"type":17},"Check who can see the record. Public certificate verification and an internal school register are different scenarios. Do not expose unnecessary personal details through a convenient confirmation page. For name changes or corrections, provide a managed process maintaining consistency without accidentally rewriting history.",{"type":29,"attrs":206,"content":208},{"align":13,"level":31,"id":207},"heading_2_11",[209],{"text":210,"type":17},"Check External Providers",{"type":11,"attrs":212,"content":213},{"align":13},[214],{"text":215,"type":17},"List services receiving data: the learning platform, email, video meetings, analytics, payments, and support. Establish each one's role, processing terms, retention settings, and deletion method. Do not assume changing a record in your system automatically changes every external copy.",{"type":11,"attrs":217,"content":218},{"align":13},[219],{"text":220,"type":17},"If the WeStudy LMS is part of this journey, compare the school's policy with current provider terms and actual configuration. Check which operations administrators can perform and which require support. Do not promise automatic deletion before verifying its existence and limits in a specific scenario.",{"type":29,"attrs":222,"content":224},{"align":13,"level":31,"id":223},"heading_2_12",[225],{"text":226,"type":17},"A Backup Is Not a Spare Archive",{"type":11,"attrs":228,"content":229},{"align":13},[230],{"text":231,"type":17},"Backups enable recovery after failure. Their cycle may differ from deletion in the live system. Know how long copies exist, who can restore them, and how earlier deletion decisions are respected after restoration. Otherwise, old records return to the active database.",{"type":11,"attrs":233,"content":234},{"align":13},[235],{"text":236,"type":17},"Do not promise immediate physical deletion from every backup environment without technical confirmation. Discuss practical procedures, access restrictions, and subsequent rotation with providers. Equally, the label ‘backup’ should not justify using old data for new mailings or research. It is a separate function requiring control according to its purpose.",{"type":29,"attrs":238,"content":240},{"align":13,"level":31,"id":239},"heading_2_13",[241],{"text":242,"type":17},"Deletion, Hiding, and Anonymization",{"type":11,"attrs":244,"content":245},{"align":13},[246],{"text":247,"type":17},"A hidden profile may remain available to administrators. Work removed from an interface may remain in a trash folder. Replacing a name with a code does not necessarily anonymize data if the school holds a key or content identifies the person. Define the technical meaning of each final action rather than only the button's name.",{"type":11,"attrs":249,"content":250},{"align":13},[251],{"text":252,"type":17},"Statistics sometimes need only an aggregated group result. Small groups or detailed descriptions, however, may allow reidentification. Check before sending data to analysts or publishing reports. If the school cannot competently confirm proper anonymization of a complex dataset, do not describe it as unconditionally anonymous and safe for any use.",{"type":29,"attrs":254,"content":256},{"align":13,"level":31,"id":255},"heading_2_14",[257],{"text":258,"type":17},"Handling Student Requests",{"type":11,"attrs":260,"content":261},{"align":13},[262],{"text":263,"type":17},"Define the contact channel, responsible person, and identity check proportionate to the request. Do not demand unnecessary documents by default, but do not change someone's data solely on a message from an unknown address. Establish the actual request: correcting a record, ending access, obtaining information, or stopping specific processing.",{"type":11,"attrs":265,"content":266},{"align":13},[267],{"text":268,"type":17},"Then check applicable rights, grounds, and obligations for the relevant categories. Do not promise the same outcome for homework and a document the school must legally retain. Explain decisions clearly, within the appropriate period, and with necessary detail. Internal instructions should support consistency rather than replace legal assessment of unfamiliar cases.",{"type":29,"attrs":270,"content":272},{"align":13,"level":31,"id":271},"heading_2_15",[273],{"text":274,"type":17},"When Deletion Needs to Be Suspended",{"type":11,"attrs":276,"content":277},{"align":13},[278],{"text":279,"type":17},"A dispute may concern payment, assessment, or material rights. Determine which records are genuinely necessary, on what grounds, and who decides on continued retention. Do not halt cleanup of the entire database over one case without proper justification.",{"type":11,"attrs":281,"content":282},{"align":13},[283],{"text":284,"type":17},"Record the exception's reason, scope, owner, and review date. When the need ends, data returns to the normal path. An exception without a date or owner easily becomes indefinite retention. Restrict access to dispute materials to prevent their accidental use for tasks unrelated to preservation's purpose.",{"type":29,"attrs":286,"content":288},{"align":13,"level":31,"id":287},"heading_2_16",[289],{"text":290,"type":17},"Test the Policy on One Completed Course",{"type":11,"attrs":292,"content":293},{"align":13},[294],{"text":295,"type":17},"Choose a small cohort and trace the entire data journey from registration form to final backup. Ask three questions for each information type: why it is still needed, where it sits, and who can perform the agreed action. If answers conflict, fix the process before scaling the rule.",{"type":11,"attrs":297,"content":298},{"align":13},[299],{"text":300,"type":17},"Use test records to check technical deletion. Ensure actions neither break necessary relationships nor leave unexpectedly open copies. Involve administrators, teachers, and the data owner: each sees a different part. The outcome should be a short list of fixes with owners rather than a formal audit-complete checkmark.",{"type":29,"attrs":302,"content":304},{"align":13,"level":31,"id":303},"heading_2_17",[305],{"text":306,"type":17},"What to Include in the Participant Notice",{"type":11,"attrs":308,"content":309},{"align":13},[310],{"text":311,"type":17},"Explain which data categories the school processes, why, how periods are determined, and where to ask questions. If a precise period depends on several events, provide a clear criterion. Do not copy another school's policy: its systems, audience, and legal obligations may differ.",{"type":11,"attrs":313,"content":314},{"align":13},[315],{"text":316,"type":17},"The public description should match the internal register. If the notice says recordings are available only to the group, check link settings and contractors' rights. If changes of purpose trigger notification, assign an owner for that decision. Policy text works only when the team can demonstrate daily compliance with its provisions.",{"type":29,"attrs":318,"content":320},{"align":13,"level":31,"id":319},"heading_2_18",[321],{"text":322,"type":17},"Build Review into School Operations",{"type":11,"attrs":324,"content":325},{"align":13},[326],{"text":327,"type":17},"Review is needed after launching a service, changing a program, adding a participant category, or substantially updating a process. Add regular reviews on a schedule appropriate to your activity. No universal frequency automatically resolves every risk; changes should not accumulate unnoticed for years.",{"type":11,"attrs":329,"content":330},{"align":13},[331],{"text":332,"type":17},"When the WeStudy LMS or another service takes a new role in the data journey, update maps and instructions. Before enabling an integration, establish which records it copies and what happens after disconnection. A new tool may simplify learning while creating another location where the old policy no longer reflects actual processing.",{"type":29,"attrs":334,"content":336},{"align":13,"level":31,"id":335},"heading_2_19",[337],{"text":338,"type":17},"Teachers' Personal Devices",{"type":11,"attrs":340,"content":341},{"align":13},[342],{"text":343,"type":17},"Downloading often happens unnoticed: teachers open assignments, browsers save copies, and files remain in Downloads. Schools need clear procedures. If a local copy is necessary, define authorized devices, protection, eventual deletion, and restrictions on syncing to unrelated personal services. Reviewing within an agreed environment without copying simplifies control where possible.",{"type":11,"attrs":345,"content":346},{"align":13},[347],{"text":348,"type":17},"When cooperation with a teacher ends, check more than platform access revocation. Complete agreed actions for working copies, exports, and recordings too. Do not request their entire personal drive for inspection: controls should be proportionate and agreed. Establishing a managed process beforehand matters more than trying to reconstruct an unknown file journey after departure.",{"type":29,"attrs":350,"content":352},{"align":13,"level":31,"id":351},"heading_2_20",[353],{"text":354,"type":17},"Learning Analytics After Program Completion",{"type":11,"attrs":356,"content":357},{"align":13},[358],{"text":359,"type":17},"Creators may compare assignment difficulty across cohorts. This often requires summary measures rather than full personal profiles. First define the analytical question: which task causes most retries, where groups slow down, or which instructions need changing. Then select the minimum information needed. This reduces the temptation to retain everything for undefined future research.",{"type":11,"attrs":361,"content":362},{"align":13},[363],{"text":364,"type":17},"Do not move historical assignments into an AI service merely because the school already holds them. New analysis may involve different operations, recipients, and risks. Check legal grounds, provider terms, and whether fewer data can achieve the purpose. Some tasks need only a manually prepared list of common difficulties without student names, contacts, or full responses.",{"type":29,"attrs":366,"content":368},{"align":13,"level":31,"id":367},"heading_2_21",[369],{"text":370,"type":17},"A Short Meeting to Assign Responsibilities",{"type":11,"attrs":372,"content":373},{"align":13},[374],{"text":375,"type":17},"Gather an administrator, a learning-team representative, and the person handling contracts and accounting. Trace one category from beginning to end. Who sets the period? Who acts? Who checks that an external service received the necessary request? If everyone answers together, nobody may truly own it. Assign a process owner and backup person.",{"type":11,"attrs":377,"content":378},{"align":13},[379],{"text":380,"type":17},"Finally, check that implementers have the authority and time required. Formal responsibility without settings access produces no result. Administrators should not invent legal periods during bulk cleanup either. The internal model should combine competent decisions, technical execution, and clear control. A small school may have the same people in several roles, but name those roles explicitly.",{"type":29,"attrs":382,"content":384},{"align":13,"level":31,"id":383},"heading_2_22",[385],{"text":386,"type":17},"An Administrator's Test Scenario",{"type":11,"attrs":388,"content":389},{"align":13},[390],{"text":391,"type":17},"Create a test participant, add fictional work, and complete the program. Then perform agreed operations and check results under different roles. Can a former mentor still see the file? Does a message retain an active link? Was a copy exported? This reveals practical gaps between documented rules and settings.",{"type":11,"attrs":393,"content":394},{"align":13},[395],{"text":396,"type":17},"Record actions the team cannot perform independently. These need a provider request route, confirmation of results, and a clear user explanation. Do not hide technical dependencies behind ‘everything is deleted automatically.’ Repeat tests after substantial service or integration changes so an earlier success does not create unjustified confidence in a new configuration.",{"type":29,"attrs":398,"content":400},{"align":13,"level":31,"id":399},"heading_2_23",[401],{"text":402,"type":17},"Keep Process Evidence Without Unnecessary New Copies",{"type":11,"attrs":404,"content":405},{"align":13},[406],{"text":407,"type":17},"Control often needs only the review date, data category, operation result, and responsible role. Keeping a copy of every deleted assignment to prove deletion is unnecessary. Logging should serve its purpose without creating a parallel archive repeating the same problem.",{"type":11,"attrs":409,"content":410},{"align":13},[411],{"text":412,"type":17},"Begin with the most sensitive and common data: assignments, meeting recordings, correspondence, and exports. Agree on rules with people actually performing the operations and test an example. A sustainable retention policy helps schools find what is needed, end unnecessary processing, and explain honestly what happens to student data after the final lesson.",{"type":29,"attrs":414,"content":416},{"align":13,"level":31,"id":415},"heading_2_24",[417],{"text":418,"type":17},"Sources",{"type":420,"attrs":421,"content":423},"ordered_list",{"order":422},1,[424,436,447,459,471],{"type":425,"content":426},"list_item",[427],{"type":11,"attrs":428,"content":429},{"align":13},[430,434],{"text":45,"type":17,"marks":431},[432],{"type":48,"attrs":433},{"href":50,"title":13},{"text":435,"type":17},".",{"type":425,"content":437},[438],{"type":11,"attrs":439,"content":440},{"align":13},[441,446],{"text":442,"type":17,"marks":443},"ICO — Storage limitation",[444],{"type":48,"attrs":445},{"href":90,"title":13},{"text":435,"type":17},{"type":425,"content":448},[449],{"type":11,"attrs":450,"content":451},{"align":13},[452,458],{"text":453,"type":17,"marks":454},"ICO — Data storage advice",[455],{"type":48,"attrs":456},{"href":457,"title":13},"https:\u002F\u002Fico.org.uk\u002Ffor-organisations\u002Fadvice-for-small-organisations\u002Finformation-security\u002Fdata-storage-advice\u002F",{"text":435,"type":17},{"type":425,"content":460},[461],{"type":11,"attrs":462,"content":463},{"align":13},[464,470],{"text":465,"type":17,"marks":466},"EDPB — Lawfulness of Data Processing",[467],{"type":48,"attrs":468},{"href":469,"title":13},"https:\u002F\u002Fwww.edpb.europa.eu\u002Fsme\u002Fbe-compliant\u002Fprocess-personal-data-lawfully_en",{"text":435,"type":17},{"type":425,"content":472},[473],{"type":11,"attrs":474,"content":475},{"align":13},[476,482],{"text":477,"type":17,"marks":478},"The Platform Provider's Privacy Terms",[479],{"type":48,"attrs":480},{"href":481,"title":13},"https:\u002F\u002Fwestudy.ua\u002Fpage\u002Fconfidentiality",{"text":435,"type":17},{"type":8,"content":484},[485],{"type":11,"content":486},[487],{"text":488,"type":17},"A practical process for an online school's data retention policy: a register, purposes, periods, owners, backups, and deletion checks.",1789477507,"https:\u002F\u002Fcloud.cs3.westudy.ua\u002Ffile?path=westudy_online%2Fpublic%2Fwestudy%2F0979aadc-0fc3-4ac7-a9b9-c2d827bcbd78.webp","polityka-zberihannia-navchalnykh-danykh",true,false,"c0445ad7-3b4f-4879-97d1-f41146d093fb","Право та етика","law-and-ethics","light","news.articles"]