Privacy & data handling

Reality Behind the Data is launching with a deliberately conservative data model: anonymised datasets only.

What clients should send

Only the fields needed for the agreed analysis. Typically this may include an anonymous pupil ID, subject results, assessment points and relevant anonymous group flags such as PP, SEND or HPA.

What clients should not send

Do not send pupil names, UPNs, dates of birth, email addresses or other direct identifiers. If an individual could still reasonably be identified, the data may not be truly anonymous.

Data minimisation

Only information necessary for the agreed analysis should be provided. Direct access to a school's MIS is not required for the launch service.

Retention and deletion

Source files are retained only for the minimum period needed to complete and quality-check the agreed work, then deleted securely. The retention and deletion arrangements for commissioned work are confirmed with the client before analysis begins.

Before identifiable data is accepted

Reality Behind the Data will not accept identifiable pupil data until appropriate processor terms, privacy documentation, retention arrangements and security controls have been established and reviewed.