Teachers want to use AI. The time savings on feedback, lesson planning, and administrative work are real and significant. But in the European Union, most popular AI tools create an immediate compliance problem when student data is involved. GDPR, combined with national student data protection laws, makes the legal picture uncomfortable for schools using ChatGPT or similar services without proper safeguards.
The Legal Problem
When a teacher pastes student work into ChatGPT for feedback, that student's data — potentially including their name, school year, and academic struggles — is being transferred to a US company. Under GDPR, this requires a lawful basis, a Data Processing Agreement, and often parental consent for minors. Most schools have none of these in place for cloud AI tools. The exposure is not theoretical — data protection authorities have already investigated schools in Germany, Italy, and the Netherlands over AI tool use.
What Compliant AI-Assisted Teaching Looks Like
The compliant path is to keep student data on school infrastructure. For teachers using Skales: all AI processing happens locally on their machine. They can use AI to generate quiz questions from their own curriculum notes, draft feedback templates, explain concepts in different languages for multilingual classrooms, and automate administrative tasks — without any student data ever leaving the school network.
For personalised feedback on student work, the pattern is: remove identifying information before input, get AI-assisted feedback, re-apply it to the specific student manually. It is one extra step that keeps the workflow legally clean. Skales supports multilingual output for teachers working with diverse classrooms — the AI can draft feedback in German, French, Spanish, or any language the student's family prefers. Learn more about multilingual features.