SCHEDULE 3Exemptions etc from the GDPR: health, social work, education and child abuse data

PART 4Education data

Educational records

15(1)This paragraph applies to a record of information which is processed—

(a)by an education authority in Scotland, and

(b)for the purpose of the relevant function of the authority.

(2)But this paragraph does not apply to information which is processed by a teacher solely for the teacher’s own use.

(3)For the purposes of this paragraph, information processed by an education authority is processed for the purpose of the relevant function of the authority if the processing relates to the discharge of that function in respect of a person—

(a)who is or has been a pupil in a school provided by the authority, or

(b)who receives, or has received, further education provided by the authority.

(4)In this paragraph “the relevant function” means, in relation to each education authority, its function under section 1 of the Education (Scotland) Act 1980 and section 7(1) of the Self-Governing Schools etc. (Scotland) Act 1989.