Pupil data: privacy notice for parents

How this information is collected and stored

ScotXed (within the Scottish Government) will securely transfer the data held about your child/children from SEEMiS, local authority systems or other public body’s systems using secure transfer software and processes for collecting and validating data.

The transferring of data about your child/children between schools, local authorities and other public bodies with the Scottish Government uses ProcXed, a secure software for collecting and validating data.  Some data about your child/children is transferred directly from awarding bodies and public bodies using secure transfer systems.  The storage of this data about your child/children within Scottish Government, is managed effectively by the ScotXed Unit (within the Scottish Government).

Why this data is needed about your child/children

The individual data about your child/children is collected by the Scottish Government’s Education Analytical Services for statistical and research purposes only for the performance of a task carried out for reasons of public interest.

Protection of individuals

The Scottish Government will not publish or make publicly available any information that allows your child/children to be identified, nor will data be used by Scottish Government to take any direct actions on your child/children as a result of the information it holds about them.

Requirements of others

Schools, local authorities and other public bodies who originally collected the data from individuals are required to provide privacy notices to you and your children to explain how your personal data about your child/children will be collected and used, and who it will be shared with.

Retention of data

Data held about your child/children within the Scottish Government is managed effectively by secure systems on secure servers and is exploited as a valuable corporate resource, subject to confidentiality restraints.

The personal data we hold about your child/children will be stored for longer periods as the data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes and is subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals.