Information asset register: template and guidance

Use our template to create an information asset register (IAR) for your school. This will help you stay compliant with the UK GDPR by keeping track of all the data you're responsible for.

Last reviewed on 14 March 2024
School types: AllSchool phases: AllRef: 49347
Contents
  1. What is it?
  2. What are the requirements?
  3. What should it include?
  4. Who is responsible for the register?
  5. Download our template
  6. Don't put the IAR on your website

What is it?

An information asset register (IAR) is a record of all the data your school holds. This includes personal data you hold about staff and pupils as well as organisational data such as administrative records and policies.

An IAR can help you to:

  • Demonstrate compliance with the UK GDPR
  • Identify risks to data
  • Prepare for critical incidents
  • Establish a retention schedule

Please note: an IAR is different to an asset register, which is a record of your physical property and equipment.

What are the requirements?

It's not a statutory requirement to keep an IAR, but the Information Commissioner's Office (ICO) recommends it as an important part of good records management.

The