All schools hold information on their pupils and staff and by law, some information will be required to be shared with various government departments. Schools also share information with other organisations when there is a need to protect a child or someone else from harm.

The Data Protection Act 1998 names schools, local authorities and other organisations that process children’s information as ‘data controllers’, meaning information held about children must only be used for specific purposes allowed by law.

Policies relating to GDPR and data protection can be downloaded from the Key Policies webpage