What is it?
An information asset register (IAR) is a record of all the data your school holds. This includes personal data you hold about staff and pupils, as well as organisational data such as administrative records and policies.
An IAR can help you to:
- Demonstrate compliance with the UK GDPR
- Identify risks to data
- Prepare for critical incidents
- Establish a retention schedule
Please note:
An IAR is different from:
- A record of processing activities, which is a record of how you process personal data (required by data protection law)
- An asset register, which is a record of your physical property and equipment
What are the requirements?
You should review the register periodically to confirm it remains up to date and accurate. You should also assess the risks to data identified in the register and physically