Anything that Google makes needs to be GDPR compliant for the same reason that McDonald’s has to make sure that their food is correctly labelled with calorie contents – they are the leaders in their fields and there are millions of people wanting to bring them down! To put it mildly, if Google’s services are not GDPR compliant, we are all buggered!
Having said this, while Google might be GDPR compliant, your school will still need to state on its Data Protection Policy that you are using Google Photos to store images. Anyone that appears in these photos will also have to agree to the policy and they also have to know how to remove themselves from Google Photos. In my school, I have a form that people can fill in to point me in the right direction of where to delete any unwanted photos or videos.
Last Update: May 25, 2019