You are here:

Last reviewed on 6 April 2021
Ref: 34641
School types: All · School phases: All

Under the UK GDPR, you must record how you process the personal data you hold. Use our template and guidance to help you comply with this requirement now and on an ongoing basis in your school.

Download our template record 

It includes entries for personal data that schools commonly process.

Processing here means anything done to personal data, such as collecting, recording, organising, structuring, storing, adapting, altering, retrieving, using, disseminating, erasing or destroying. It can be manual or automated. 

However, the template doesn't contain a complete list, so you'll need to add and/or delete entries as necessary.

Read on to find out how to populate and maintain your record.  

KeyDoc: template record of processing activities

How you must populate your record 

You must record the information listed in columns A-K to be compliant with the UK General Data Protection Regulation (UK GDPR).

The information listed in the rest of the columns is useful and helps support good practice, but is not necessary to comply with requirements.

If you have fewer than 250 employees (including if you're in a

More from The Key


Bitesize training with a big impact

Our on-demand training has your whole board covered and lets them learn at a time and pace that suits them.

Help your new governors hit the ground running with our expertly-designed induction training, and our role-specific courses support your link governors develop key skills and confidence in their role.


New eLearning: DSL refresher training

Your DSL’s training should be refreshed at least once every 2 years. 

Designed in collaboration with safeguarding experts, our 2.5 hour online refresher training course reminds DSLs how to put their knowledge into practice, with in-depth, real-world scenarios.


The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence v3.0.