Release Of Information Form For Schools Template for England and Wales

When your school needs to share student information with external organizations, you require proper legal authorization to comply with data protection laws in England and Wales. A Release Of Information Form For Schools provides this authorization while protecting student privacy rights and ensuring compliance with UK GDPR and the Data Protection Act 2018.

When do you need this document?

You need this form whenever student information must be shared beyond the school's immediate educational purposes. Common situations include transferring records to a new school, sharing information with special education assessment services, providing data to educational psychologists, or releasing information to social services for safeguarding purposes. The form is also required when sharing information with examination boards, university admissions services, or apprenticeship providers. Without proper authorization, sharing student data could breach data protection laws and expose your school to significant penalties.

Key legal considerations

Under UK GDPR, schools must have a lawful basis for processing and sharing personal data, with consent being the most appropriate basis for voluntary information sharing. The form must clearly specify what information is being shared, why it's being shared, and how long the authorization remains valid. You must ensure the recipient organization has legitimate grounds for receiving the information and appropriate data protection measures in place. Special category data, such as health information or details about special educational needs, requires additional safeguards and explicit consent. Parents and students over 12 generally have the right to access information held about them and may withdraw consent at any time, subject to certain exceptions for safeguarding purposes.

Legal requirements in England and Wales

The Education (Pupil Information) (England) Regulations 2005 set specific requirements for maintaining and sharing pupil records, while the Children Act 1989 and 2004 establish safeguarding obligations that may override data protection considerations in certain circumstances. Schools must provide clear information about data processing activities in their privacy notices and ensure any information sharing serves the best interests of the child. The form must identify the specific legal basis for processing under UK GDPR, whether consent, legitimate interests, or public task. You must maintain accurate records of all information sharing activities and ensure recipients understand their responsibilities under data protection law. When students reach 18, they gain full control over their personal data, and parental consent is no longer sufficient for information sharing.