Herefordshire Council manages its responsibilities as laid out in the Data Protection legislation carefully and offers support to all schools in managing and maintaining pupil records in accordance with the law. The appropriate processing and sharing of relevant personal data allows all schools to work in partnership with the council and other organisations.

Privacy notices

Under the Data Protection legislation, all Data Controllers (which includes schools) must issue privacy notices which inform the public why they are processing personal information, the categories of personal information they therefore may collect, who it may be shared with (including in this case the council and the DfE), how it will be stored, how long it will be retained and how an individual can exercise their rights under the legislation.

The Department for Education has issued advice on privacy notices including privacy notice model documents.

Herefordshire Council's Children and families privacy notice provides information on how the council uses pupil data.