megaphone icon updated on 16 May 2022
School types: All · School phases: All
Ref: 38423

Read our model policy to see what good looks like, and use our set of key questions to make sure your school is complying with data protection laws.

A note on approval

Your school's data protection policy can be approved by the governing board, an individual governor or the headteacher, according to the DfE's guidance on statutory policies. However, the governing board should approve your school's policy on the protection of children's biometric information. 

Because our model policy covers the protection of children's biometric information, we've stated (in section 19 of the policy) that it'll be approved by the full board.

What this policy needs to do

Your school's/trust's policy needs to follow the requirements of:

When you review your school's policy, you'll want to look for