How to determine the age of consent
You don't need to get consent for all data processing. Read our article on seeking consent for guidance on when it's appropriate to do so.
If you still need to get consent to process pupils' personal data, keep reading.
No statutory rules
The UK GDPR doesn't define the age at which children can provide consent for their own personal data to be processed.
The Information Commissioner's Office (ICO) also doesn't set an age, but it does say you need to consider the competence of the child – whether they have the capacity to understand the implications of the collection and processing of their personal data.
If you don't consider the child competent, you'll need to seek parental consent, unless it's evident that would be against