You are here:

Last updated on 28 August 2018
Ref: 35372
School types: All · School phases: All

Learn under what circumstances you can share pupil and staff medical data under the GDPR. We set out what lawful bases you can typically rely on, and outline good practice on sharing information with staff so that they're prepared for emergencies but the data is kept secure.

Article tools


  1. Identify a lawful basis and condition for processing
  2. Pupil medical data
  3. Staff medical data
  4. No need to seek consent
  5. Sharing medical information with your staff

The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence.