Pupil data protection for schools & academies.
Schools hold some of the most sensitive personal data about children of any organisation in the UK — pupil files, SEND records, safeguarding documentation, medical information and family data. Under UK GDPR, the DfE and Ofsted expectations, secure documented disposal is a legal and regulatory obligation.
Why schools have specific pupil data obligations.
Schools process personal data about children — some of the most vulnerable individuals in society and the most protected under data protection law. Pupil data includes not just educational records but family circumstances, medical conditions, mental health information, SEND assessments and safeguarding case records — all of which are either special category data or among the most sensitive personal data categories.
The DfE's Records Management guidance sets out specific retention periods for school records and requires that documents are destroyed securely when those periods are met. Ofsted inspections assess schools' data protection compliance as part of leadership and management judgements. A written policy for document disposal, backed by certificates of destruction, provides the documented evidence inspectors expect.
For multi-academy trusts, the obligation extends across every school in the trust. Each individual school site needs its own documented disposal procedures — and its own certificates of destruction as evidence of compliance.
Medical, SEND and safeguarding records relating to children are special category data, requiring the highest level of security including at the point of disposal.
The DfE sets specific retention periods for school records and requires secure destruction at end of retention. Certificates of destruction are the recommended form of evidence.
Safeguarding documentation requires particular care at disposal. Records must not simply be placed in general waste — secure certified destruction is required.
Ofsted assess schools' compliance with data protection legislation under the leadership and management judgement. Document disposal procedures with evidenced certificates demonstrate compliance.
All pupil, staff and school documents accepted.
All paper-based pupil, staff and administrative documents accepted. No sorting or preparation required.
Academic records, progress reports, school reports, attendance records and general pupil files at end of retention.
Special Educational Needs files, Education, Health and Care plans, SENCO records and support documentation.
Child protection records, safeguarding referrals, case conference notes, MARAC records and looked-after children files.
Pupil medical information, allergy records, medication consent forms and health care plans.
Completed exam scripts, mock papers, internal assessment records and teacher marking materials containing pupil data.
Letters, emails printed for files, home-school agreements and any correspondence containing family personal data.
Fixed-term and permanent exclusion documentation, governor hearing records and reinstatement correspondence.
Employee records, DBS certificates, single central record supporting documents and HR correspondence.
Budget records, payroll documents, grant applications and financial correspondence at end of retention period.
Safeguarding records
Safeguarding files need special care at disposal.
Safeguarding records are among the most sensitive documents a school holds. They contain information about abuse, family circumstances, mental health and child protection interventions that must never be accessible to unauthorised individuals — including at the point of disposal. Placing safeguarding files in a general bin or recycling bag is a serious data breach and a safeguarding failure.
Get a quote for secure disposalDfE guidance requires safeguarding records to be retained until the young person's 25th birthday or 7 years after leaving, whichever is longer.
Safeguarding documentation must be destroyed by certified shredding — never placed in recycling, general waste or skip bins.
A certificate of destruction provides documented evidence that safeguarding files have been permanently and securely destroyed.
Collections built around the school calendar.
We understand that schools need flexible scheduling. Whether you need term-time only collections or a year-round service, we work around your calendar.
Collections scheduled during term time only — avoiding holiday periods when the school is unstaffed. We coordinate with your office to agree dates that suit the school calendar.
For schools that generate confidential waste year-round — including sixth form centres, special schools and all-year settings — a continuous scheduled service provides ongoing compliance coverage.
Multi-academy trusts operating multiple schools across Dorset, Hampshire and Wiltshire can arrange a single group account with individual certificates per school per visit. Contact us to discuss your trust's requirements.
How long should a school keep pupil and staff records?
Retention periods for school records are set by DfE guidance. These are minimum periods — records should not be destroyed before the retention period is met.
| Record type | Minimum retention | Basis |
|---|---|---|
| Pupil educational records | Until 25th birthday From date of birth | DfE Records Management |
| SEND records & EHC plans | Until 25th birthday Or 31 August after leaving school | DfE Records Management |
| Safeguarding records | Until 25th birthday Or 7 years after leaving, whichever is longer | Keeping Children Safe in Education |
| Child protection records | 35 years From date of last entry | DfE / local authority guidance |
| Exam scripts (internal) | 1 year After results issued | JCQ guidance |
| Staff records | 6 years After employment ends | Employment law best practice |
| DBS certificates | 6 months maximum Then destroy per DBS guidance | DBS Code of Practice |
| Financial records | 6 years After end of financial year | HMRC / academy financial handbook |
This table is for general guidance. Always refer to the DfE's Records Management guidance and your local authority's retention schedule for your specific circumstances.
Fixed prices. Published upfront.
All plans include free sacks or lockable bin and a certificate of destruction after every collection. MAT group pricing available on request.
Serving schools across three counties.
Trusted by schools across the region.
"Exactly what our school needed. Reliable collections, clear pricing and the certificate of destruction is perfect for our GDPR compliance records. The team understand school environments completely."
"We arranged a group account for our academy trust. Consistent service across all our schools, individual certificates per site and transparent pricing. Would highly recommend to any MAT."
School shredding FAQs
Get a quote for your school or academy trust.
We work with schools, academies and multi-academy trusts across Dorset, Hampshire and Wiltshire. Term-time scheduling available. Tell us your requirements and we'll confirm a price the same day.
89 Commercial Road, Bournemouth, England, BH2 5RR
Office@Clearcutconfidentialwaste.co.uk
01202 022409
© 2026 Clearcut Confidential Waste