📨 Updated Subject Access Request Guidance for MATs & Schools
December 11, 2024
We have had a number of queries from schools with regards to the processing of health data for staff and pupils in light of the phased reopening of schools and the implementation of the NHS Test and Trace system. The ICO has now updated its own guidance for processing data during the “recovery” phase of the coronavirus pandemic. Below are the key points from their updated guidance as well as links to the full guidance. We have also created an addendum to your privacy notices with specific reference to the NHS Test and Trace system and a Data Protection Impact Assessment (DPIA) for health data which includes Covid-19 testing data.
We have provided an addendum to the privacy notices that covers sharing data with the NHS Test and Trace system. Whilst the information that has been released about the system doesn’t explicitly state how the system may contact employers and request information for contact tracing, our conclusion is that the most they may request is the name and contact information (phone number or email address) of anyone who has been “in contact” with one of your staff or pupils who has tested positive. The addendum reflects that and gives the legal bases for sharing that data.
You can find the addendum in Global Documents on the portal. Sign in here:
It is likely that you are also handling additional health data due to the coronavirus (including your own testing data), so you should also consider updating your existing pupil and workforce privacy notices to include this data. You should state why you are collecting it, the legal bases for that, who, if anyone, you are sharing it with, and how long you are retaining it. Let us know if you need help with this.
As lockdown continues to ease, the ICO has updated their Data Protection and Coronavirus Information Hub. This now includes their six data protection steps for organisations during coronavirus recovery which, in overview, are:
Please contact us if you do have further questions at GDPR@schoolpro.uk.
Please continue to ask if there is anything further that we can do to support you at this time.
Stay safe and healthy,
Ian, Rich and Ben
SchoolPro TLC Ltd (2020)
SchoolPro TLC is not responsible for the content of external websites.
For a confidential conversation about the needs of your school or organisation, please contact SchoolPro TLC using the links below. Based in Gloucestershire, available anywhere in the UK!
SchoolPro TLC Limited was formed by school and education leaders with over 60 years of experience across all stages of education and in a variety of contexts. The company founders have worked to improve educational provision as both senior leaders and school governors.
Monday – Friday : 8am – 6pm
© 2024 SchoolPro TLC – All Rights Reserved