Have you or your children been a SCHOOL pupil or student aged 2-19, since 1996?

Your personal, identifiable and sensitive data might be among the 23+ million and growing pupil records taken from schools in England since 1996, named since 2002, and given out by the Department for Education since 2012 from the National Pupil Database. Pupil-level data are handed out for free for re-use by a range of third-parties, including commercial organisations like data management consultancies, think tanks, and “one-man shows”, as well as other government departments, police, charities, Fleet Street and television journalists.

Data are stored forever and never deleted. They are not anonymous, but named, individual records. Parents and children are not asked for consent or offered any choice before the data are handed out without our permission.

Now the government wants to add even more sensitive data to it, from January 2018. Together with charities and leading advocates of child rights in England, we are calling on them to first make the existing database safe, fair and transparent. Data used badly can mean stigma and discrimination. #LabelsLastaLifetime.

The National Pupil Database is “one of the richest education datasets in the world” using records from every child in state education, and some data from exam-age children from some independent schools.

defenddigitalme is campaigning to make pupil data safe. Users should come to the data, not have raw identifiable data copied and sent out, as it has been over 1,000 times since 2012. There are better, safer ways of providing access to personal confidential data for research purposes.

We believe children and parents should be informed, and have control over their own personal data, if and how they are stored and used in the National Pupil Database. It’s all part of improving children’s digital understanding. Use of records for one thing, should not automatically mean re-use for a quite different purpose, and school records should promote children’s development to their full potential, not put them at risk of discrimination.

Our research shows that schools, children and parents don’t know this database exists. Schools are not told about the onward distribution of personal data to third parties from the National Pupil Database. This must change. The Department for Education has talked about change, since 2015 including steps to look at a privacy preserving option. But new routes must replace the old unsafe model, not simply offer another additional path to access the information.

The Department for Education must:

  • Make pupil data safe
  • Stop giving out identifiable data to commercial third parties and press without consent
  • Start telling pupils and parents what it does with their identifiable data
  • Be transparent about policy and practice

The Department of Education must hold and handle the data it has taken from citizens in ways people could reasonably expect, transparently, and with respect.

This campaign also includes a call for full transparency and accountability for pupil data across other government departments, and across the education sector in England.

Ongoing campaign work includes opposing the Department for Education (DfE) school census expansion to collect nationality and country of birth data from every child, which began in September 2016, and any use of pupil data for non-educational purposes including immigration enforcement. We support the #BoycottSchoolCensus of nationality data collection. See our timeline of school census expansion for more details and What Can I Do to take action.

For a longer introduction to the National Pupil Database, listen to the sound cloud of a presentation given by Phil Booth and Terri Dowty in 2012.



defenddigitalme is a non-profit, non-partisan group led by parents with expertise in data privacy and data protection, freedom of information, biometrics, and child rights; supported by a network of further academics, advocates and campaigners.

We call for change in policy and practice at the Department for Education on the National Pupil Database and improvement in children’s data privacy and digital rights across the education sector in England, to make all children’s data safe, fair and transparent.

We welcome new supporters, just contact us here. We welcome questions from parents and pupils, and will offer free support and advice in any the areas of our work, or direct you to others if we cannot.

Jen Persson has been Director of defenddigitalme, coordinating the current work since 2015. She can be contacted directly by Direct Message on Twitter via @TheABB or the campaign @defenddigitalme.

The campaign was awarded a single annual grant from the Joseph Rowntree Reform Trust Ltd. in April 2017.

Follow us on Social Media


 Twitter      Facebook


defenddigitalme is registered as a non-profit company limited by guarantee with charitable objects at Companies House and voluntarily on the ICO register of data controllers. There you can read how we process any personal data you give us. We do not make use of any web tracking or profiling tools or track site visitors, however this wordpress site builds in trackers by default, and your own browser settings and cookies may track your site visit, beyond our control. The site is managed via wordpress.com and their privacy policy at Automattic is here.



[1] updated on Feb 8th 2016 in response to a Freedom of Information request. The total number of Unique Pupil Numbers (UPNs) in the NPD as at 28/12/2015 was 19,807,973. This covers pupil records since 2000. We had previously been told 8-9 million.

[2] Higher Education data held in HESA databases dates from as far back as 1994.