# Children's Data Minimisation Assessment Report

## Assessment Information

| Field | Value |
|-------|-------|
| **Assessment Date** | 2026-03-14 |
| **Controller** | BrightPath Learning Inc. |
| **Service** | BrightPath Educational Gaming Platform |
| **Assessor** | Privacy Engineering Team |

## Data Inventory Assessment

| Data Element | Purpose | Necessary | Background | Retention | Status |
|-------------|---------|:---------:|:----------:|-----------|:------:|
| First name | Account ID | Yes | No | Account + 30d | PASS |
| Age band (e.g., 10-12) | Content levelling | Yes | No | Account + 30d | PASS |
| Parent email | Communication | Yes | No | Account + 30d | PASS |
| Learning scores | Progress tracking | Yes | No | Academic year + 30d | PASS |
| Game activity | Service improvement | Yes | No | 30d rolling | PASS |
| Country (from IP) | Content localisation | Yes | No | Session only | PASS |
| Error logs | Debugging | Yes | No | 7d rolling | PASS |
| Consent records | Legal compliance | Yes | No | Account + 6 years | PASS |

## Retention Schedule Compliance

| Category | Maximum Retention | Current Setting | Compliant |
|----------|------------------|----------------|:---------:|
| Account data | Account + 30 days | Account + 30 days | Yes |
| Activity data | 30 days rolling | 30 days rolling | Yes |
| Learning data | Academic year + 30 days | Academic year + 30 days | Yes |
| Communication data | 90 days rolling | 90 days rolling | Yes |
| Technical data | 7 days rolling | 7 days rolling | Yes |
| Consent records | Account + 6 years | Account + 6 years | Yes |

## Summary

| Metric | Value |
|--------|-------|
| **Data elements assessed** | 8 |
| **Compliant** | 8 |
| **Non-compliant** | 0 |
| **Compliance Rate** | 100% |

## Sign-Off

| Role | Name | Date |
|------|------|------|
| DPO | Dr. Claudia Meier | 2026-03-14 |

## Next Assessment: 2026-06-14 (Quarterly)