Does your school’s document strategy meet the mark?
Schools produce more paperwork than almost any other organisation. Student files, HR records, financial accounts, governor minutes, safeguarding documentation, and in older institutions, decades of historic archive material. Most of it has to be kept for a set period, some of it has to be kept far longer than people assume, and very little of it can be handled with a single blanket policy.
Despite this, most educational establishments manage their records reactively. There’s rarely a written strategy that covers what gets kept, for how long, where it’s stored, and how it gets destroyed. It tends to be whoever has been in the office longest making judgment calls based on habit rather than policy. That’s not a criticism of the people doing the job. It’s a symptom of nobody in the sector treating this as something that needs a proper system.
Why one policy doesn’t work for every record type
The retention rules for a school aren’t uniform, and treating them as if they are creates problems in both directions. Keep everything indefinitely, and you’re carrying unnecessary GDPR risk. Delete too early, and you’re exposed if a record is ever needed for a dispute, an audit, or a safeguarding review years later.
Student records have different retention periods depending on what they are. An active pupil file isn’t governed by the same timeline as exam records, and SEN documentation often needs to be kept longer than either.
HR and staff files sit under a separate set of rules entirely. Safeguarding-related staff records in particular tend to need retention well beyond what most people expect, given that allegations or concerns can resurface many years after someone has left the institution.
Financial and funding records are usually tied to audit cycles and funding body requirements, which set their own minimum retention periods regardless of what the school might otherwise prefer.
Historic and archival material is a different category again. Universities and older schools often hold documents that have genuine heritage value rather than pure administrative use, and lumping these in with routine paperwork means either destroying something irreplaceable or storing it badly.
The IRMS (Information and Records Management Society) publishes a retention schedule specifically for schools and colleges, which is the standard reference point in the UK for how long different record types should be kept. Anyone building or reviewing a records policy should be working from the current version of that schedule
GDPR and student data
This is usually the part that causes the most anxiety, and reasonably so. Compliant retention isn’t just “delete old files eventually.” It means having a defined retention period for each category of student data, being able to justify why that period was chosen, and being able to act on it consistently.
The tension most schools run into is between retention obligations and a person’s right to erasure under UK GDPR. A parent or former pupil requesting deletion doesn’t automatically override a legal retention requirement, but knowing which one takes precedence in a given situation requires the policy to actually exist and be understood by whoever is fielding the request.
The bigger practical risk shows up when a subject access request comes in. If student records are spread across departments, filing cabinets, old email accounts and whatever storage system happened to be in use that decade, finding everything relevant within the statutory timeframe becomes genuinely difficult. Most data protection failures in this space aren’t the result of anyone mishandling information deliberately. They’re the result of records being disorganised enough that nobody can locate what they’re required to produce. The ICO’s guidance for the education sector is the relevant reference point for schools working through this.
Where physical storage still matters
Digitisation has reduced paper volumes in most schools, but it hasn’t eliminated them. Historic pupil records, older HR files predating digital systems, governor minutes going back years: a lot of this still exists only on paper, and digitising all of it in one go usually isn’t realistic given the time and cost involved.
Secure off-site storage is often the more practical route for this material. It removes the fire, flood and unauthorised access risks that come with keeping sensitive records in ordinary office space, and it does so without requiring the school to digitise everything before it can be considered properly managed. Given the sensitivity of pupil data specifically, access control matters more here than it might in other sectors. You can read more about how this applies to schools, colleges and universities on our educational establishments page.
Heritage material needs separate treatment
If a school or university has any real age to it, there’s a good chance some of what’s sitting in storage isn’t just old paperwork; it’s material with actual historic value. Early logbooks, founding documents, decades of governor records. Treating a document like that the same way you’d treat last year’s HR files, in terms of both handling and eventual disposal, risks losing something that can’t be replaced.
Heritage scanning exists for exactly this situation: preserving fragile or historically significant material properly rather than storing it under the same terms as routine administrative records. More detail on how that process works is on our heritage scanning page.
What happens when records reach the end of their life
This is where a lot of schools carry risk without realising it. Ad hoc disposal, whether that’s a normal bin, an unlogged shredding session, or handing boxes to whoever offers to take them away, isn’t defensible if the school is ever challenged on how sensitive data was destroyed.
A proper confidential destruction process gives you an audit trail: a record of what was destroyed, when, and by what method, along with a certificate confirming it. That’s the difference between being able to demonstrate compliance and simply hoping the question never comes up. More on how this works is on our confidential destruction page.
Where to start
If your school doesn’t have a written records policy, the starting point isn’t a full system overhaul. It’s an audit: what record types exist, where each one currently sits, and what retention period applies according to the current IRMS schedule. That exercise alone usually surfaces the gaps, whether that’s records kept too long, records at risk of being destroyed too early, or paperwork nobody can currently locate at all.
From there, the decisions about storage, digitisation and destruction get much easier, because they’re based on what the records actually are rather than on habit.
