To meet the requirements of the Data Protection Act 1998, schools are required to issue a

Privacy Notice to children and young people and/or parents and guardians summarising the information held on record about children and young people, why it is held, and the third parties to whom it may be passed.