Question to the Department for Education:

To ask the Secretary of State for Education, what steps she is taking to ensure adequate provision of safeguarding for the ePEP online system.

The department’s statutory guidance for Virtual School Heads sets out what electronic Personal Education Plans (ePEPs) must cover and the outcomes they are intended to support. While we do not mandate or endorse specific ePEP platforms, local authorities, as data controllers, are expected to comply with data protection requirements and safeguarding standards when selecting and using such systems. This means they are responsible for selecting secure platforms that comply with UK GDPR and safeguarding requirements to protect sensitive information about children in care.

In addition, the department’s ‘Data Protection in Schools’ guidance helps the education sector and local authorities understand their legal responsibilities when processing sensitive data. This guidance includes information on complying with UK GDPR, secure data storage and appropriate data sharing, all of which are appropriate to safeguarding children’s personal information.