A teacher, administrator or communications lead may leave with more than a laptop to hand back. They may be the only person who knows where last year's annual-day images are stored, which parent app contains them, or who owns the school's social media account. A safe handover keeps necessary records available to the school while ending access that is no longer needed.
Start the conversation before the person's last working day if possible. If a departure is sudden, the principal and IT lead should assign an authorised person to secure access promptly and document what still needs investigating.
1. Find the places photos can live
Ask the departing staff member and their manager to identify work-related copies and access points. Record the location and owner, rather than copying the images into the checklist itself.
- School laptop, phone, camera, memory card and external drives.
- Shared drive, cloud folders, parent app, event gallery and editing tools.
- Email attachments, messaging groups, temporary sharing links and download folders.
- School website and social media accounts, including who can approve posts or recover an account.
- Photographer or agency portals, accounts and links created for the school.
Check where the school's media records and relevant parent preferences are kept, too. Access to the photographs alone is not enough to decide whether a particular image can be published or shared.
2. Transfer responsibility before removing access
Name a replacement owner and an alternate for each essential account. Transfer only work material the school has authority to manage, using an approved school-controlled location. Verify that the replacement can open needed files and contact the right administrator; avoid asking the departing employee to disclose a personal password or hand over their personal account.
For each location, note the system name, owner, purpose, authorised replacement, where the working copy will reside, and who must confirm the handover. Store the checklist with restricted access; it should not contain student photos, passwords or full lists of children.
| Handover item | Who acts | How to check |
|---|---|---|
| Annual-day folder | Communications lead | Replacement can access the approved copy |
| Parent gallery | School administrator | New owner and backup administrator are recorded |
| Social account | Account administrator | Replacement can access the business account and recovery methods |
| Photographer portal | Vendor contact | School knows which links and vendor access remain active |
3. End or change access deliberately
On the agreed transition date, the authorised administrator should disable the person's individual access where appropriate, remove them from school workspaces and relevant groups, review active sessions and sharing links, and update recovery contacts. Where a shared password was used, rotate it through the school's approved process and record who has the new access. Prefer individual accounts with multi-factor authentication where available.
Do not delete a folder merely because the employee is leaving. The school may still need the records, and retention rules, safeguarding matters, disputes or other preservation needs can affect what happens next. Ask the responsible records owner and adviser before deleting or changing retention settings.
4. Resolve personal devices and outside copies
If school images may be on a personal phone or personal cloud account, involve the staff member, the school administrator and HR. Agree a documented, proportionate handover and removal process consistent with school policy, employment arrangements and advice. Do not assume remote deletion is possible or appropriate. If a copy cannot be located or removal cannot be confirmed, record the open issue, its risk and the person responsible for follow-up.
For an outside photographer or agency, review the contract and contact the vendor about any active links, account access and agreed retention or deletion arrangements. A vendor's confirmation is useful evidence, not proof that every copy everywhere has disappeared.
5. Close the loop
Within the school's chosen review period, the principal or delegate can check that:
- A named successor can access necessary files and understands any pending parent requests.
- The former staff member's access and recovery methods have been reviewed, and any exceptions have an owner and end date.
- Devices, media cards, vendor links and known outside copies are accounted for.
- Open issues have an owner and review date; the checklist is stored securely.
If there are signs of an unauthorised disclosure or missing device, follow the school's incident response procedure and obtain advice on applicable notification obligations. Do not assume every lost device automatically triggers the same reporting duty.
How does this relate to India's DPDP framework?
The Digital Personal Data Protection Act, 2023 and notified 2025 Rules provide for obligations concerning personal-data security, with phased commencement. This article is an operational preparation checklist, not a claim that every step is an express Indian legal requirement. Schools should check the latest notifications and advice for their circumstances. For another practical perspective on removing access after staff changes, see the New Zealand Privacy Commissioner's education guidance; it is not Indian law.
For related situations, see the photographer handover checklist, school media retention register, and vendor privacy questions.
MediaGuard can be discussed as part of a school's media workflow. Wider readiness may also involve advisers, vendors and school systems; the actual product scope and any integrations should be confirmed for the school's setup.
What does this mean for your school?
Turn the guidance into a practical plan for your school, from policies and staff to parent permissions and media.
