Our school has a tradition of putting up pictures of vulnerable students in the staff room, along with some description of what their issue is. I'm sure we're not the only school.
As DPO I've said that we should not do this. Also, there are other better mechanisms of informing staff about vulnerable students that don't require essentially publicly posting information about these students - the staff room is used by cleaners, people carrying out maintenance at the school, a local church volunteer group, and potentially all manner of other adult visitors.
I have been told by the DSL that "safeguarding trumps data protection", hence these pictures and text must stay. This has been backed up by the Headteacher.
I think it's a gross oversimplification to say that safeguarding trumps data protection, because the two don't need to compete in this situation. Staff can be as informed, if not better informed, by other mechanisms.
Thoughts?