Sign In

or
Don't have an account? 

School Data Retention Schedule

GDPR
Data Retention

This School Data Retention Schedule outlines how long different categories of data should be kept in line with UK GDPR, the Data Protection Act 2018, Keeping Children Safe in Education (KCSIE) , the IRMS Records Management Toolkit for Schools , and guidance from the Department for Education (DfE) . Schools must retain personal data for no longer than necessary, while ensuring that key records - especially those linked to safeguarding - are preserved for appropriate periods. Secure disposal is required once data is no longer needed. Section Record Type Retention Period Suggested Action (if not 'Keep') Possible Evidence Pupil Records Pupil educational record Transfer to next school; keep until 25 if no transfer Securely destroy after retention period Pupil file, MIS export Pupil attendance registers 3 years after the end of the school year Securely delete Attendance logs, registers Pupil behaviour records Until 25th birthday Securely delete Behaviour logs, pastoral…

  Read the rest of this

The full version is part of a Digital Confidence subscription, along with the rest of the guides, the template documents, and the self-assessment tools.

See what is included   Try the free health-check first

Already a subscriber? Sign in and this page will open in full.

School Data Retention Schedule on Digital Confidence for Education