The Protection of Freedoms Act 2012 and weak enforcement of data protection law are failing to protect millions of children from the normalisation of routine use of biometric data for everyday canteen and library transactions, and increasingly intrusive bodily surveillance in the classroom. Pupils in the UK are effectively guinea pigs in the use of emerging technology for companies from around the world, including facial recognition technology that has already been banned from schools in other countries.