The University's data protection policy sets out the approach to compliance with the Data Protection Act 2018 (DPA) and the General Data Protection Regulation (GDPR). See: http://www.ncl.ac.uk/data.protection/
You have ownership of your ePortfolio and you decide what to share and who to share it with. For example, if you add a blog post, and make sure there are no community sharing in place, and all the share groups are deselected, you will not be sharing that post with anyone.
The tutor meeting is a strictly confidential meeting where only the Personal Tutor and the tutee will have access to any of the notes in the meeting. The student can add extra people involved in their tutoring care and arrange to pass any of the notes on to this new person - the student must provide this explicit informed consent and it cannot be done on their behalf.
For any group meetings recorded in ePortfolio, only the attendees of the meeting will have access to the meeting record in ePortfolio.