Every school runs on video now. Lessons recorded for students who
were off sick. Presentations, drama and PE assessments. Interviews
for a history project. Assemblies, open days and the clip of the
choir that every parent wants a copy of. Most of it shows children,
and much of it shows them by name.
And most of it gets edited the quickest way someone can find: by
searching for a free tool, dropping the file in and waiting. That
quick fix is where the risk is, because of how nearly every free
online video tool works.
Where the video actually goes
A typical online video editor, compressor or caption generator
doesn't do the work in your browser. It takes a copy of your file,
sends it over the internet to a server, does the work there and
sends a result back. For those minutes, and often for much longer,
a complete copy of the video sits on a computer the school doesn't
own, in a country it may not know, run by a company it has never
checked.
What happens next is in the small print, if it's anywhere. Some
services delete files after an hour; some keep them for weeks;
some keep them until an account is closed. Some terms grant the
service a licence to use what you send "to improve our products",
which can include training AI models. Many pass files to other
companies for storage, transcription or analytics. A free service
has to be paid for somehow, and the data that passes through it is
the obvious place to look.
Why it matters more in a school
A school handles the personal data of children, and the law treats
that as a special responsibility: the UK's data protection
regulator, the ICO, explains
why children merit specific protection.
A video of a pupil who can be identified is personal data in its
own right: a face, a voice, often a name and a uniform that says
where they go every day. Data protection law in the UK, Europe and
elsewhere expects a school to know where that data goes, why, for
how long and under what agreement. A teacher who drops a clip into an unknown website
to shrink it for email has, without meaning to, handed it to a
supplier nobody approved.
The usual answer is a list of approved tools, a contract with each
supplier and a data protection impact assessment for every one. The
Department for Education's guidance on
procuring educational technology
asks schools to check where a supplier holds pupils' data, whether
it leaves the UK, and what the contract says about deleting it.
That's the right process, and it's slow, which is exactly why
people reach for the quick free tool instead. The better answer is
a tool that leaves nothing to assess, because the video never goes
to a supplier in the first place.