Purpose of the Template
When your school collects health screening data at entry points, you're handling sensitive data under GDPR Article 9 and U.S. state laws. This intake form template helps you document lawful processing, limit data collection to what's necessary, and create the required consent record for health-related student data.
Use this template for temperature checks, symptom screening, or COVID-19 exposure tracking at school entry points. It's suitable for both physical and virtual learning environments where health attestations are needed before accessing online platforms.
Prerequisites
Before using this form, ensure:
- Your legal basis is documented. Under GDPR, you likely rely on "public interest" (Article 6(1)(e)) and "substantial public interest" for special category health data (Article 9(2)(g)). For U.S. schools, confirm your state's public health emergency orders authorize this collection.
- Your retention period is set. Health screening data for immediate entry decisions shouldn't last beyond the public health emergency. Define your Retention Period now, typically 30-90 days or "until local health order expires," whichever is shorter.
- Your data flow is mapped. Who receives this data? School nurses, administrative staff, contact tracing teams? Document every recipient and their access justification.
- Parents understand their rights. Even if consent isn't your legal basis, provide clear notice. Under FERPA, parents retain inspection rights over health records in the education file.
The Template
STUDENT HEALTH SCREENING RECORD
School: [School Name]
Collection Date: [Auto-populate]
Collection Point: [Main Entrance / Virtual Portal / Bus Entry]
STUDENT INFORMATION
Student Name: ___________________________
Grade/Homeroom: _________________________
Parent/Guardian Name: ____________________
Emergency Contact Number: ________________
HEALTH SCREENING QUESTIONS
(Answer YES or NO to each question)
1. Does the student have a measured temperature of 100.4°F (38°C) or higher?
[ ] YES [ ] NO Temperature Reading: ______
2. Is the student experiencing any of the following symptoms today?
- Cough (new or worsening) [ ] YES [ ] NO
- Shortness of breath [ ] YES [ ] NO
- Loss of taste or smell [ ] YES [ ] NO
- Muscle aches (not from exercise) [ ] YES [ ] NO
3. Has the student been in close contact (within 6 feet for 15+ minutes) with anyone confirmed to have COVID-19 in the past 14 days?
[ ] YES [ ] NO
4. Is the student currently under isolation or quarantine orders from a healthcare provider or public health authority?
[ ] YES [ ] NO
SCREENING OUTCOME
[ ] CLEARED for entry/access
[ ] REFERRED to school nurse for assessment
[ ] ENTRY DENIED - parent/guardian contacted
Staff Member Conducting Screening: _______________
Time: _______
PRIVACY NOTICE
This health information is collected under [state public health order/board policy reference]. It will be:
- Shared only with authorized school health staff and local health authorities as required
- Retained for [30/60/90] days from collection date
- Destroyed securely via [shredding/[secure deletion](/glossary/secure-deletion)] after retention period
You have the right to review this record and request correction of inaccurate information by contacting [school privacy contact].
For virtual learning: By submitting this form, the parent/guardian attests that the information provided is accurate to the best of their knowledge.
Customization Tips
Adjust the symptom list. Reference your local health department's current screening protocol and update the checklist accordingly. Avoid adding irrelevant symptoms.
Tailor the temperature threshold. Some areas use 100.0°F, others 100.4°F. Match your local public health order's definition of fever.
Modify retention language. If you're a California public school, note that CPRA grants students deletion rights even for health data collected under legal obligation. Explain why deletion can't occur until the retention period expires.
Add your Technical and Organisational Measures disclosure. If storing data digitally, state where and who has access. If it's paper, specify the locked cabinet location and key holder.
Incorporate your Data Importer obligations if using a vendor. If the vendor is outside your jurisdiction, add language about the transfer mechanism: "Data is processed by [Vendor] under Standard Contractual Clauses approved by the European Commission."
Clarify the distinction between screening data and medical records. This form documents a point-in-time health check, not a diagnosis. It's not part of the student's permanent health file under most record retention schedules.
Validation Steps
After customizing, check:
Legal review. Have your school attorney or Chief Privacy Officer confirm the legal basis language matches your jurisdiction's current public health orders.
Data minimization audit. Can you justify every field? Remove any unnecessary fields.
Access control test. Pull an access log from your system. If anyone outside your documented data flow accessed records, revoke access immediately and document the breach if necessary.
Retention enforcement check. Set a calendar reminder for your retention period. Verify that records are purged on schedule. Test your Secure Deletion procedure with a small batch before the deadline.
Parent communication verification. Spot-check: call three parents and ask if they understand why you're collecting this data and how long you'll keep it. If they can't explain it back to you, rewrite your notice in simpler language.
The shift to virtual learning and hybrid school models created data collection practices that many schools weren't prepared for. This template provides a starting point for managing one of the highest-risk data flows: health screening at school entry points.
