Question to the Department for Education:

To ask Her Majesty's Government what are the confidentiality requirements for core pupil data in schools.

Schools have a legal duty under the Data Protection Act and the General Data Protection Regulation to ensure that any personal data they process is handled and stored securely. The Information Commissioner’s Office (ICO), the regulatory body established to uphold information rights, is responsible for overseeing compliance with these requirements for all public bodies (including schools). The ICO provide further information on data security at: https://ico.org.uk/for-organisations/guide-to-data-protection/principle-7-security#blank.