UK GDPR: sharing safeguarding information

Be confident in how you share safeguarding information under the UK GDPR. Know the principles to follow, your legal basis for sharing data and your responsibilities for information sharing.

Updated
on 21 September 2026
See updates
School types: All•School phases: All•Ref: 36084
Contents
  1. You have a statutory duty to share information
  2. Data protection does not prevent you sharing safeguarding information
  3. You don't need consent to share safeguarding information
  4. How to share safeguarding information effectively
  5. Responsibilities of staff

You have a statutory duty to share information

From 30 September 2026, you have a statutory duty to share information for the purpose of safeguarding and promoting the welfare of a child, including where concerns relate to early help, prevention and unmet need. 

You must share relevant information with another organisation, including in response to any request, if sharing may help the recipient to:

  • Assess need
  • Make a decision
  • Provide support or take action to safeguard and promote the welfare of a child, including when a child potentially poses a risk to others

The duty applies when you are sharing the information with another ‘relevant person’, i.e. an education setting, local authority, police, or health services. It also covers information about any other individual connected to a child where relevant to the child’s safety or welfare, meaning information about