All schools, Local Authorities, DfE and other educational bodies that process personal data about pupils are required by the Data Protection Act to issue a Privacy Notice to parents, to inform them and their child/children of the purposes for which that
personal data may be held and used. This includes Non-Maintained Special Schools (NMSSs), City Technology Colleges (CTCs), Free Schools and Academies. They must also issue a Privacy Notice to all members of staff to inform them how their personal data is processed
for the purposes of the Workforce Census.
Schools can use and amend these examples of privacy notices to suit their local needs and circumstances which can be found on the GOV.UK website