How to Show Student Results on Your Website Without Breaking GDPR or a Child's Privacy

You have students who aced their exams, kids who got into the school they wanted, results you're rightly proud of. Wanting to show them off on your website is natural — nothing sells tutoring better than proof that your work pays off. The catch is that a grade attached to a child's name is, in the eyes of the law, a minor's personal data. And minors' data is among the most heavily protected under GDPR.

The good news: you can show impressive, convincing results without endangering the child's privacy or your own business. You just need to know what you're allowed to publish, what you aren't, and how to ask for permission when you really do want a name or a photo. Let's go through it in plain language, no lawyer-speak.

Why a school result counts as a minor's personal data

A perfect exam score isn't the problem. The problem appears when that score can be tied to a specific child — through a full name, a photo, a school or a small town. GDPR calls this "personal data," and when it belongs to a minor the protection is stricter. Under GDPR the default digital-consent age is 16 (some countries set it lower, France at 15); below that age, a parent or guardian decides.

A detail many people miss: even without a name, the combination "Maria P., 12, School X in the village" can identify a child in a small community. Real anonymisation means nobody — not even a neighbour — can guess who it is. When in doubt, treat the information as identifiable.

The golden rule: pick one clean path, not a middle one

You essentially have two legal routes, and it's best not to blur them:

• Anonymise fully. Show the result but cut every link to an identifiable child. No name, no photo, no details that narrow the circle. You don't need consent, because it's no longer personal data.

• Ask for explicit consent. Want the real name, a photo, a full story? Then you need the parent's written permission (and ideally the child's too). Consent must be specific, freely given, and something you can withdraw at any time.

What to avoid is the "naive middle ground": initials plus a small town plus a blurry photo. It feels anonymous, but often isn't. When you're not sure you've anonymised cleanly, ask for consent.

What you can publish with peace of mind

• Aggregate results: "students admitted to their chosen track," "class average up since the mock exam" — numbers and trends, no names.
• Testimonials from parents, with their consent, about their own experience — the adult speaks for themselves, the child stays unidentified.
• Screenshots of work or records with the name, ID number and any identifier covered (a real blur, not a see-through rectangle).
• "Before–after" case studies written as a story: "an eighth-grader went from passing grades to getting into their target high school," with nothing that locates them.
• Reviews written by students over 18, who can give consent themselves.

Simple rule: if a stranger can't identify the child from what you published, you're on safe ground.

How to ask for consent properly (and why always in writing)

If you want a real name or a photo, a hallway "the mum said it's fine" doesn't cover you. You need consent you can prove.

Proper consent:

• is in writing (a signed sheet or an online form), kept somewhere orderly;
• states exactly what you're publishing (name? photo? result? and where — site, Facebook?);
• is separate for text and for images (a photo needs its own permission);
• is freely given, with no strings like "sign or the lessons stop";
• can be withdrawn any time, and you can remove the material quickly.

Keep a small register: who signed, for what, and when. If a parent changes their mind a year later, you want to find and remove the content in minutes, not scramble through your phone.

What it looks like in practice (and how we can help)

A results section that convinces doesn't need children's faces. It needs clarity and credible proof: a few admitted students (aggregated), two or three parent testimonials with their consent, maybe one anonymised screenshot of an exercise, and an honestly written "before–after" story. Honesty sells better than a wall of photos you weren't allowed to post anyway.

At MPO Web Studio we build exactly this kind of page — with a consent flow included (a parental permission form and a place to keep the records) and the copy already drafted, so you don't start from scratch. We work fully remotely, with transparent pricing, and we first build you a ready-made demo you can see before you decide.

If you'd like us to show you what your results page could look like, message us on WhatsApp — you'll get a concrete example, not a generic quote.