Data Collection on students by a foreign organization
According to the IBO:
1.10 Treatment of personal data by the IB Organization
While the IB Organization will use its reasonable endeavours to protect the personal data submitted to it from access, misuse, dissemination or alteration by non-authorized persons, it does not accept responsibility for such acts committed while such data is in transit through the Internet or stored on the IB’s Internet servers. By submitting personal data to the IB Organization you agree not to hold the IB Organization, its directors, staff and affiliates responsible for any such breach of confidentiality or integrity of your personal data.