England updates guidance on how schools share personal data

England’s Department for Education updated its school data protection guidance on 13 November. It explains how schools should identify a lawful basis for sharing personal information, when to consider a privacy impact assessment and what records and agreements they may need.

The update covers safeguarding, transferring pupil records, sharing staff information and responding when people ask for their own exam data. The department says the guidance reflects the Data (Use and Access) Act 2025.