Longitudinal Educational Outcomes: privacy notice

How the data is collected and stored

How do we transfer and store the data

The transferring of individual level data between organisations with the Scottish Government is by Egress Switch, a secure data transfer system.  The storage of this data within Scottish Government, is managed by Educational Analytical Services (within the Scottish Government).

Requirements of Others

Other public bodies who originally collected the data from individuals are required to provide privacy notices to explain how their personal data will be collected and used, and who it will be shared with.

Retention of Data

Education data within the Scottish Government is managed effectively by secure systems on secure servers and is exploited as a valuable corporate resource, subject to confidentiality restraints.

Regarding the retention of data, Article 5 (1)(e) of the General Data Protection Regulation (GDPR) states that personal data shall be:

“kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject ('storage limitation')”.

The data are processed in line with the existing data protection legislation.  We will review the data annually and delete any information not needed. If you have any concerns about the processing of your personal data, you can raise these with the Information Commissioner’s Office (ICO) at: https://ico.org.uk/concerns/.