Data protection: model privacy notices

If you're a data protection officer (DPO), use our model privacy notices to keep yours up to date with the latest regulations and guidance. They'll save you time and help you stay compliant with this complex area. Boards, see what good looks like so you can be assured your school or trust has the right notices in place.

Last reviewed on 18 November 2025See updates
Ref: 38435
Statutory/mandatory for:
Maintained schools
Academies
Free schools
Independent schools
Sixth-form colleges
Pupil referral units
Non-maintained special schools
Contents
  1. What's my role?
  2. Download our model privacy notices 
  3. How to issue your privacy notices

This page is for maintained schools and single academy trusts (SATs). If you're in a multi-academy trust (MAT), select the 'multi-academy trust' tab above.

What's my role?

If you're a data protection officer (DPO), issuing these notices is likely to be part of your role. Read on to find out how to do this.

If you're a governor or trustee, your board is responsible for making sure data is protected. This is explained in the Department for Education's guidance on data protection in schools. Check that your school has these notices in place for each group of people it holds data for. They could be published on the website, or provided to individuals when your school begins to process their data. There's also a notice that covers you as a volunteer.

Under the UK General Data Protection Regulation (UK GDPR), your school is required to provide certain