Information governance advice for schools

All schools in Devon are individually responsible for ensuring that they comply with the requirements of both the Data Protection Act (DPA) 1998 and the Freedom of Information Act (FOIA) 2000.

If you are unclear about your obligations under either legislation or would like more specific support with a particular Information Governance issue or request, please contact the Information Commissioner’s Office on 0303 123 1113.

Devon County Council is not legally obliged to provide support to schools or academies to assist them with enquiries under information disclosure legislation. However, to assist schools the council has compiled the following table :

Data Protection Act 1998

ObligationPublished Guidance More information
Comply with the 8 Data Protection PrinciplesData Protection PrinciplesInformation Commissioner’s Office
Do not hold personal data longer than necessaryRead our Record Retention Guidance Records Management Toolkit for Schools published by the Information and Records Management Society
Ensure your privacy notices make it clear how you will process personal dataRead the Department for Education’s Privacy Notice GuidanceAvailable from the Information Commissioner’s Office
Individuals have a right to request a copy of the personal data that is held about them.  Such requests should be processed to comply with the  Data Protection ActRead the ICO’s guidance on Subject Access RequestsContact the Information Commissioner’s Office on 0303 123 1113
Maintain your Data Protection Registration with the Information Commissioner’s Office (ICO)Read the ICO’s Notification GuidanceFor specific advice about your own ICO Notification contact them direct on 0303 123 1113

Devon County Council has also produced a Photography and Filming in Schools Code of Practice

Freedom of Information Act 2000

ObligationPublished Guidance More information
Apply exemptions appropriatelyRefusing a Request – Devon County Council Information Commissioner’s Office
Maintain a publication schemeRead the ICO’s guidance on Publication SchemesContact the Information Commissioner’s Office on 0303 123 1113
Refusing a request appropriatelyRead the ICO’s guidance on Refusing a RequestContact the Information Commissioner’s Office on 0303 123 1113
Respond to requests within 20 working daysRead the ICO’s guidance on Handling a RequestContact the Information Commissioner’s Office on 0303 123 1113