Data from pupils, students or teachers must not simply be passed on to third parties . If personal data should or must be passed on to third parties, the consent of the person concerned must first be obtained. This consent must be in writing.