Your basket

Your basket is empty.

To request a quote or invoice, add the items first: the request sends the items in your basket.

Browse planners and resources

The basket shows up to 10 different items. Review your complete basket at checkout; a quote or invoice request includes every item.

Request a quote or invoice

Include your school’s purchase order number if you have one.

Your current basket’s products, selected options, SKUs and quantities will be included. Prices and delivery are confirmed when we issue the quote or invoice.

England

Data protection: privacy notices and accountability

Official wording, responsibilities and review duties.

Evidence link

Back to School Policy Checker

Requirement and scope

Choose the governance type; academy and maintained duties differ. Choose a phase; confirm age and provision conditions.

Maintained school

Statutory duty [1]

not stated in the source. Website publication: not stated in the source. Check access and disclosure duties separately.

Source-established phases
Primary, Secondary, All-through, Special
Source-established school types
Mainstream school, Special school
EYFS condition
No separate EYFS condition stated
Accountable
not stated in the source
Approval
not stated in the source
Operational owner
Data protection officer reviews privacy notices [1]
Review cycle
At least annually and whenever personal-data processing changes significantly [1]

Independent schools and pupil referral units are outside this catalogue’s supported governance mapping.

Academy or free school

Statutory duty [1]

not stated in the source. Website publication: not stated in the source. Check access and disclosure duties separately.

Source-established phases
Primary, Secondary, All-through, Special
Source-established school types
Mainstream school, Special school
EYFS condition
No separate EYFS condition stated
Accountable
not stated in the source
Approval
not stated in the source
Operational owner
Data protection officer reviews privacy notices [1]
Review cycle
At least annually and whenever personal-data processing changes significantly [1]

Independent schools and pupil referral units are outside this catalogue’s supported governance mapping.

The right to be informed is a duty. Website publication is one possible channel, alongside induction packs and other direct communications. No exclusive online duty is asserted.

Official wording

Inform data subjects about their privacy rights

Privacy notices are the most common way of complying with data subjects’ right to be informed. There are a number of ways you can keep data subjects informed about how your school deals with their personal data. For pupils, these include sharing the school’s privacy notice: in an induction pack, when joining the school at the start of each school year when they provide extra personal data during the school year through the school website For staff, these include:

Data protection policies and procedures · Reviewed 2026-10-26

Privacy notices

Privacy notices should be reviewed by your data protection officer: at least annually whenever you make a significant change to how you process personal data Parents, pupils and staff, who are the data subjects , must be notified in the case of any significant changes to your privacy notices or if the way you use their personal data changes.

Data protection policies and procedures · Reviewed 2026-10-26

Sources and updates

Official evidence reviewed 2026-10-26. Check the source edition and conditions before acting.

  1. Data protection policies and procedures

    Reviewed edition matches. Source text matches the reviewed edition.

    Reviewed on
    2026-10-26
    Reviewed version
    2026-06-17T09:05:01+01:00
    Last checked
    2026-10-27T11:00:36.203Z
    Reviewed text digest (SHA-256)
    b1b84dfc7b4f43fddfab9a771d6edd57c1831f485e9f367e5e9495579dc3e706
    Official content identity
    772959d7-4551-4b78-a835-d997b9d54deb
    Official content digest (SHA-256)
    7577c88d89cd471ccab8012a694b10f24d088f3818597b0e17d65f0e16ed6030

    https://www.gov.uk/guidance/data-protection-in-schools/data-protection-policies-and-procedures

    Track updates in the Roundup

  2. Data protection in schools

    Reviewed edition matches. Publication version matches the reviewed edition.

    Reviewed on
    2026-10-26
    Reviewed version
    2026-10-14T14:27:17+01:00
    Last checked
    2026-10-27T11:00:36.203Z
    Reviewed text digest (SHA-256)
    3ec7314e36afca606076b85b1d5982a62793dbec7f62418832c701f1a87d0d3b
    Official content identity
    80b652c0-ee37-45b7-986e-1177b110d86d
    Official content digest (SHA-256)
    7f74a52d453f6dc436756fea0a109852c8df5fbfd88c69b5af1cd73d5f5c0abb

    https://www.gov.uk/guidance/data-protection-in-schools

    Track updates in the Roundup

Guidance, not legal advice. Local checks are not a compliance judgement; other duties may apply.