New rules proposed by the ICO will make sure only the minimum amount of children's personal data is collected and retained and geolocation services should be switched off by default.

The government has stopped third parties accessing pupil data while it reviews its approval process in preparation for the GDPR.