Protecting Pupil Data When Using AI Tools
This intervention framework references recognised UK education guidance — including Department for Education (DfE) generative AI guidance for schools, Information Commissioner's Office (ICO) expectations on pupil data, Keeping Children Safe in Education (KCSIE), Joint Council for Qualifications (JCQ) and Ofqual assessment integrity guidance, and Ofsted expectations for safeguarding and curriculum quality. It supports school self-assessment; it is not legal advice and does not imply official endorsement or compliance certification.
Why This Matters
Most public AI tools store and may reuse what you type. Entering identifiable pupil information can breach data protection law and create safeguarding risk.
This guide aligns to Information Commissioner's Office (ICO) expectations and your school's data protection responsibilities.
The Golden Rules
Rule 1: Never Enter Personal Data
Keep the following out of public AI tools:
- Pupil names or initials that identify a child
- SEND, medical or safeguarding information
- Behaviour records and assessment data
- Photographs or contact details
Rule 2: Anonymise
If you need help with a real scenario, remove identifying detail. Use "a Year 8 pupil" rather than a name, and strip anything that could identify the child in combination.
Rule 3: Use Approved Tools
Check your school's approved tools list before adopting anything new. If in doubt, ask your DPO or AI Lead.
Rule 4: Assume It Is Not Private
Treat anything typed into a public AI tool as potentially visible to others. If you would not put it on a postcard, do not put it in the prompt.
When Something Goes Wrong
If personal data is entered into an AI tool by mistake:
- Report it to your Data Protection Officer immediately
- Follow your school's data breach procedure
- Do not attempt to hide or delay reporting
Quick Privacy Check
Before you press enter:
- No child can be identified from this prompt
- No SEND, medical or safeguarding detail is included
- The tool is on our approved list
- I know who our DPO is if something goes wrong
What can I download?
Pupil Data Reminder Card (PDF — add download in editor)
Wallet-size reminder of what never to enter into AI tools.
What training exists?
AI Awareness Day Teacher Session
Improve Your Benchmark Score
This framework supports improvement in:
- Privacy & Data Protection
- Safeguarding
- Safe Adoption
Protecting pupil data is part of safeguarding — not a separate task.
Retake the teacher benchmark after applying these rules
Wider Support & Development
For more information, guidance and support — including how AI Awareness Day can help your school — contact the AI Awareness team.