School comms — class photo to graduation.
Anne Friis · communications lead at Skanderborg Skole. Karsten Lyhne · the external DPO consultant on retainer with the municipality. Pupils too young to consent on their own behalf — every invite has to route through a parent or guardian until the year they age out.
The school posture — blocked by default, guardian-routed
Anne's Library is connected. The DPA was signed when Skanderborg Skole onboarded with Ansikt; it sits outside the school-year routine. The school's current Campaign — this academic year — is running, with four Purposes defined and Channels listed under each. See the Setup walkthrough for the first hour from connector to Campaign.
What is different about a school is not a separate settings surface — it is the subject mix. Nearly every face Ansikt detects is a pupil too young to consent on their own behalf, so nearly every invite has to be addressed to a guardian rather than the subject. That routing is decided per face at labelling time, not at the library level; Step 2 shows it in flight.
The piece that does live on the settings page is the default-response policy. Anne confirms Block for non-responders — the block-by-default posture. If a guardian does not answer the invite, the pupil's face is treated as denied across every Purpose. The audit history line is dated and attributed to Anne; if a parent later asks "when did you decide that?" the answer is on screen.
Class 2A's first-day photo — identify, mark as child, invite the guardian
The first-day photo of Klasse 2A lands in the library. Ansikt detects every face on the page. The class teacher knows who is who; Anne does the identification, one face at a time. She taps a face on the image — the bounding box highlights.
The labelling panel opens. She ticks Subject needs a guardian to consent on their behalf. The email field collapses and the guardian block opens beneath. She types the pupil's name, then the guardian's name and the guardian's email. She picks the Purposes the school is asking consent for — for a first-day photo it is the newsletter and the yearbook, not the public website. Save & request consent.
Two things happen. The magic link goes out to the guardian — not the child — for them to decide from their own portal. And on Ansikt's side, the pupil's face stays as a per-photo detection only. No persistent biometric template is computed for them until the guardian grants consent. The face on the next class photo will not be auto-matched until the guardian has said yes.
That is the per-face control buyers ask about most: a class of twenty-eight, and each pupil's recognition state is governed by one guardian's decision. Anne never holds the consent. The record holds it.
Handing over at 18 — the lifecycle question
Liam is in Klasse 2A today. In ten years he will be 18 and the legal authority over his image rights moves from Karen to him. When he turns 18, parental authority needs to lapse and a fresh magic link issues to him. In preview
The automated handoff is on the roadmap. The record itself is already aware of the management chain — Liam managed by Karen, with her consent on file — so the configuration to flip is small. That is the part a DPO wants to know exists.
That is the school side. Want to see the parent's side, or the same loop elsewhere?
The folkeskole and the parent map onto each other one-to-one — read both back-to-back to see the full loop. Or see how the same workflow plays at an adult club or an SMB workplace.