Access to information

This page provides information on the right of access to information about a child in relation to their education records, medical records and children's services records. 

An introduction to access to information

As a general rule, only those with parental responsibility will have the right of access to information about a child’s educational, medical and Children's Services records. 

You can find more information about parental responsibility here. 

Although some education and family law provisions are relevant in understanding the legal position in this area, the Data Protection Act 2018, General Data Protection Regulations (GDPR) and the Freedom of Information Act 2000 are the primary sources of legislation.

Education Records

Education is one area where the presence of parental responsibility is a less determinative factor in relation to access to information. This is because the definition of “parent” in education law is much wider than any other field. Under Section 576 Education Act 1996, “parent” includes a child’s natural parents, anyone with parental responsibility for the child or anyone who is caring for a child. 

If the child attends a maintained school, the parent or carer will have a right to access the child’s educational records and information about the child. The educational record can include information about the pupil's academic achievements, correspondence from teachers and major disciplinary incidents, such as exclusions. 

The legislative context in relation to educational records can be found in The Education (Pupil Information) (England) Regulations 2005.

There is not an equivalent legal right of access to information if the child attends an Academy, Independent or Free School. The parent or carer would have to check the school’s policy to ascertain whether they have a right of access to this information. These rules can also be dictated by the contractual relationship between the school and the parent. 

However, Academies do have to provide certain information to parents in accordance with Part 6 of the Independent School Standards. This includes an annual written report of each registered pupil’s progress and attainment in the main subject areas taught.

Can a child request information? 

Under Article 15 GDPR, all data subjects are entitled to know the personal data which is held about them and they can obtain a copy of that information. In the school context, children can request their information though a Subject Access Request (SAR). Their request may be denied if the school believe that access to such information may place the child at risk of harm or if they have determined that the child does not have sufficient mental capacity and maturity. 

How do you make a request? 

The request for information disclosures should be made in writing to the school. For a child’s educational records, the common procedure is to make a request in writing to the school’s Board of Governors. You should also consult the relevant policies to confirm the procedures, as they could differ slightly from school to school.

A request for an educational record must receive a response within 15 school days.

You could issue a formal complaint to the school if the school denies access to the information. There are certain circumstances where the school may refuse to disclose the educational record and this is where information might cause serious harm to the physical or mental health of the pupil or another individual.

Medical Records

If a resident parent refuses to disclose medical information about a child, the non-resident parent could directly approach the GP or medical practitioner with their request for information. 

For confidentiality purposes, the medical practitioner may ask the parent to demonstrate that they have parental responsibility before the disclosure is made. A complaint can be made to the General Practice Manager if access to information is refused. 

If a child has relocated and the surgery has changed, and you are unaware of the location of the new surgery, you can write to the Area Health Authority, with proof of parental responsibility, and they will provide information in relation to the new practice details.

Children's Services Records

Those with parental responsibility will be able to access information held by Children's Services about both themselves and the wider family where relevant. Parents, or others with parental responsibility, will be able to access information about a child if the child is too young or has a disability which prevents them from asking information on their own. You also have the right to see information about their social work policies, procedures and other written records. 

There are some instances when Children’s Service can refuse the access to information when:

• Serious harm to the mental or physical health would be likely to happen either to you or someone else if you saw those records;
• Giving you the information would interfere with the prevention or detection of a crime;
• The information identifies other people, unless those people have agreed to the information being disclosed. Note that social workers cannot use this excuse unless the person viewing the information would be likely to cause those individuals significant harm.

Can children make a Subject Access Request (SAR)? 

Children have the same rights to access the information as adults and no assumption should be made about their level of understanding. However, the social worker may conduct a competence assessment on the child, which should be assessed on an individual basis. Written confirmation that the child understands the nature of the application would also be required.

Care leavers can make a Subject Access Request which should be processed promptly by the local Children’s Services. The acknowledgement should be sent to the care leaver within 10 working days. The Local Authority has a statutory duty to deal with a subject access request within 40 days.

How do you make a request?

The request can be made either by mail, email or fax to the local Children’s Services. In certain instances, a phone call to the Children’s Services might also suffice.

If you are denied access to information, a complaint can be made by following Children's Services complaints procedure. More information on this can be found in our Complaints against Children's Services How-To-Guide.

Do children or young people have a say in whether their personal information is released to parents/carers? 

Generally, once a child reaches the age of 16, they will be consulted before their personal information is released to parents/carers. There are instances, for example, where an absent parent requests information and, where the child does not wish for their information to be disclosed. The organisation to whom the request is made (whether it be the school, a medical practice or Children's Services) is entitled to act in accordance with the wishes and feelings of the child and refuse to disclose information, where applicable. The requirement to act in accordance with the wishes and feelings of the child will be overridden if they are at risk of significant harm. 

What else can you do if you are refused access to information about your child?

The Information Commissioners Office (ICO) is a non-departmental public body which report directly to Parliament. They are sponsored by the Department for Culture, Media and Sport. The ICO provides advice on data protection and freedom of information and a complaint against the relevant body could be issued through them. 

Their contact number is 0303 123 1113 or alternatively you can access their website for guidance.