Answer a parent subject access request

Find, redact and send a pupil's data inside one calendar month.

1. Log the request with the date received. Most people forget this: The one month clock starts on the day it arrives, even in the holidays
2. Check who is asking and that they have the right
3. Search records, emails and safeguarding files
4. Remove other pupils' and third party data
5. Check safeguarding notes with the safeguarding lead (Designated safeguarding lead signs off)
6. Approve the response (Data protection officer signs off)
7. Send the data securely

All recipes