Schools need to be particularly aware of the following issues when collecting and processing personal data about learners and other individuals.
For information on sharing data with other bodies, see the section on Privacy notices.
Under the Data Protection Act 1998 all schools processing personal data must comply with the eight enforceable principles of good practice. Data must be:
To comply with these principles every school processing personal data must notify under the Act. Failure to notify is a criminal offence. You can find out more about your school's need to notify from the Information Commissioner's website.
The Data Protection Act 1998 has replaced the 1984 Act. If your governing body and headteacher have each registered under the 1984 Act, the two register entries will probably expire at different times. You are required to notify at the time the first of these register entries expires. The second register entry will need to be removed at the same time. You will be sent the appropriate forms by the Information Commissioner before the first of the register entries expires.
An application for notification can be made either via the Information Commisioner's website, or by telephoning the Notification Department on 08456 30 60 60 or on 01625 54 57 40.
Either method will enable you to ask for a standard notification template, which has been designed to cover your specific activities. If you choose to use one of the available notification templates, the details provided should still be checked, and any amendments made as necessary. Your LA may be able to assist with this.
The following headings in the forms need particular care:
Further guidance on all these issues is available from the Information Commissioner's website.
A link to the Information Commissioner's Office (ICO), the UK's independent authority set up to promote access to official information and to protect personal information.
Notification is a statutory requirement and every organisation that processes personal information must notify the Information Commissioner’s Office (ICO), unless they are exempt. Failure to notify is a criminal offence.