General Data Protection and Retention of Data Policy

This General Data Protection and Retention of Data Policy has been designed for children’s homes to support full compliance with the Children’s Homes (England) Regulations 2015, the associated Children’s Homes Quality Standards, and the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

The policy provides clear, practical guidance for staff on collecting, storing, using and sharing personal information in a lawful, fair and transparent manner. It outlines responsibilities for data protection, including lawful bases for processing, consent, confidentiality, and individuals’ rights. The policy also sets out procedures for secure record-keeping, access control, data retention periods, secure disposal, and reporting data breaches, ensuring that information is handled appropriately and retained only for as long as necessary to protect children and young people and support effective service delivery.

These documents are guidance only and must be adapted to reflect each home’s individual practices. Providers are responsible for ensuring ongoing compliance with legislation, regulations, and Ofsted expectations.