Slough Borough Council collects and holds personal information relating to children and young people. We need this information in order to comply with the statutory obligations placed on us by the government and so we can deliver and manage services for and on behalf of educational providers e.g. schools as well as early years education providers, childcare providers, children, young people and families.
The information we collect comes from the sources above and from other organisations. All information is held and processed in accordance with the Data Protection Act 2018.
For more information, please visit the Your Privacy page on this site.
We use children and young people’s data to:
Under the General Data Protection Regulation (GDPR), the legal basis / bases we rely on for processing personal and special category information for the above purposes are:
In addition, we collect information on our children and young people in order to comply with the obligations placed on us by the Department for Education (DfE) i.e. for the purpose of statutory data collections, as outlined under section 3 of The Education (Information About Individual Pupils) (England) Regulations 2013.
Further information on the statutory data collections we are required to participate in, and their legal basis can be found on the GOV.UK site.
We collect personal information via secure file transfer systems including those used between schools, local authorities and partner organisations. Information is also obtained via online or hard copy application / data collection forms.
Children and young people’s data is essential for the local authority’s operational use. Whilst the majority of personal information you provide to us is mandatory, some of it is requested on a voluntary basis. In order to comply with the data protection legislation, we will inform you at the point of collection, whether you are required to provide certain personal information to us or if you have a choice in this.
We hold our data on secure systems and premises, and retain it for no longer than necessary. All of our staff undertake mandatory information security and data protection training and understand their obligations with regard to data handling. Access to systems, networks and premises are strictly controlled. All technology is regularly tested and patched to ensure the highest possible level of security.
We routinely share children and young people’s information with:
We also share information with the Police on receipt of a formal request in order to help prevent and detect crime.
We do not share information about our children and young people with anyone without consent unless the law and our policies allow us to do so. Further information on the legal basis for sharing can be found in the sections which follow.
We hold information about young people living in our area, including about their education and training history. This is to support the provision of their education up to the age of 20 (and beyond this age for those with a special educational need or disability). Under parts 1 and 2 of the Education and Skills Act 2008, education institutions and other public bodies (including the Department for Education (DfE), police, probation and health services) may pass information to us to help us to support these provisions.
Once our pupils reach the age of 13, we also pass pupil information to the provider of youth support services as they have responsibilities in relation to the education or training of 13-19 year olds under section 507B of the Education Act 1996.
This enables them to provide services as follows:
The information shared is limited to the child’s name, address and date of birth. However where a parent or guardian provides their consent, other information relevant to the provision of youth support services will be shared. This right is transferred to the child / pupil once he/she reaches the age 16.
Data is securely transferred to and held by the youth support service and is held for no longer than necessary.
The Department for Education (DfE) collects personal data from educational settings and local authorities via various statutory data collections. We are required to share information about our children and young people with the Department for Education (DfE) for the purpose of those data collections, under section 3 of The Education (Information About Individual Pupils) (England) Regulations 2013.
All data is transferred securely and held by DfE under a combination of software and hardware controls which meet the current government security policy framework.
For more information, please see the ‘How Government uses your data’ section.
NHS England has responsibility within the NHS by section 7A of the National Health Act 2006 and agreements made under it for the commissioning of a Child Health Information System (CHIS) services and systems.
South Central and West CSU is commissioned to maintain the CHIS, as data processor on behalf of NHS England as the data controller.
Both SCWCSU and Slough Borough Council have a statutory obligation to support the delivery of the healthy child programme and the sharing of data ensures that service delivery is efficient in front line delivery, and therefore provides the best outcomes for children. The sharing of data with the NHS is required:
The legal basis for sharing is covered in S251b - Health and Social Care (Safety and Quality) Act 2015.
Under data protection legislation, parents and pupils have the right to request access to information about them that we hold. For more information, please refer to the Your Privacy page on this website.
You have the right to:
If you have a concern or complaint about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office.
If you would like to discuss anything in this privacy notice, please contact: firstname.lastname@example.org.
The pupil data that we lawfully share with the DfE through data collections:
To find out more about the data collection requirements placed on us by the Department for Education (for example; via the school census on the GOV.UK site).
Much of the data about pupils in England goes on to be held in the National Pupil Database (NPD).
The NPD is owned and managed by the Department for Education and contains information about pupils in schools in England. It provides invaluable evidence on educational performance to inform independent research, as well as studies commissioned by the Department.
It is held in electronic format for statistical purposes. This information is securely collected from a range of sources including schools, local authorities and awarding bodies.
Find out more about the National Pupil Database (NPD) on the GOV.UK site.
The law allows the Department to share pupils’ personal data with certain third parties, including:
More information about the Department’s NPD data sharing process is on the GOV.UK site.
Organisations fighting or identifying crime may use their legal powers to contact DfE to request access to individual level information relevant to detecting that crime. Whilst numbers fluctuate slightly over time, DfE typically supplies data on around 600 pupils per year to the Home Office and roughly 1 per year to the Police.
For information about which organisations the Department has provided pupil information, (and for which project) or to access a monthly breakdown of data share volumes with Home Office and the Police please visit the DfE external data sharing page on the GOV.UK site.
You can contact DfE via the GOV.UK site.