Schools collect and maintain detailed student data, including sensitive personal information. Schools can also require or encourage students, parents and carers to use third party software applications for learning and other school related activities. This audit examines how effectively the Department of Education and NSW public schools protect the privacy and security of student information in their own systems and when provided to third parties.