Privacy & data handling

Reality Behind the Data is launching with a deliberately conservative data model: anonymised datasets only.

What clients should send

Only the fields needed for the agreed analysis. Typically this may include an anonymous pupil ID, subject results, assessment points and relevant anonymous group flags such as PP, SEND or HPA.

What clients should not send

Do not send pupil names, UPNs, dates of birth, email addresses or other direct identifiers. If an individual could still reasonably be identified, the data may not be truly anonymous.

Data minimisation

Only information necessary for the agreed analysis should be provided. Direct access to a school's MIS is not required for the launch service.

Retention and deletion

Source files should be retained only for the minimum period necessary to complete and quality-check the agreed work, then securely deleted. A final public retention schedule and contractual wording should be established before larger-scale processing.

Before identifiable data is accepted

Reality Behind the Data will not accept identifiable pupil data until appropriate processor terms, privacy documentation, retention arrangements and security controls have been established and reviewed.