Recommendations
The consent of the data subject is not envisaged for the categories of personal data which are collected in practice. The electronic Register contains health data, blood type, PIN of the parent and for all those data the consent should be envisaged by law. Access to this data should be also regulated in the software.
Keeping period should be defined precisely for every data collection separately.