Information asset register: template and guidance

Use our template to create an information asset register (IAR) for your school. This will help you stay compliant with the UK GDPR by keeping track of all the data you're responsible for.

Last reviewed on 14 March 2024
School types: AllSchool phases: AllRef: 49347
  1. What is it?
  2. What are the requirements?
  3. What should it include?
  4. Who is responsible for the register?
  5. Download our template
  6. Don't put the IAR on your website

What is it?

An information asset register (IAR) is a record of all the data your school holds. This includes personal data you hold about staff and pupils as well as organisational data such as administrative records and policies.

An IAR can help you to:

  • Demonstrate compliance with the UK GDPR
  • Identify risks to data
  • Prepare for critical incidents
  • Establish a retention schedule

Please note: an IAR is different to an asset register, which is a record of your physical property and equipment.

What are the requirements?

It's not a statutory requirement to keep an IAR, but the Information Commissioner's Office (ICO) recommends it as an important part of good records management.


The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence v3.0.