Forms

Public-task lawful-basis assessment record

To document and justify a school's assessment of whether processing personal information may rely on the public task or official authority lawful basis, including the relevant task or authority, necessity, legal basis, children's interests, findings, approval and review history.

Form
CalmComplianceForm template

Public-task lawful-basis assessment record

Version
v1
Updated
7 October 2026
Reviewed
7 October 2026
Audience
Data protection leads, senior leaders, governance professionals and other authorised staff in maintained and academy primary and secondary schools in England.
Jurisdiction
england

Blank fields · read-only preview

Scope and applicability

Complete this record when the school is assessing or choosing public task or official authority as the lawful basis for a specific processing purpose. Record the school's legal status, the actual processing purpose, the relevant task or authority, why the processing is necessary, the legal basis in law, the findings, approval and review arrangements.

This assessment concerns reliance on, or consideration of, public task or official authority as the lawful basis

Required

Complete the remaining fields only where this statement applies to the processing being assessed.

  • Tick when complete

School and processing details

School name

Required

Enter the legal or commonly used name of the school.

Enter school name

School legal status

Required

Select the status or statuses relevant to this assessment.

Choose one

  • Maintained school
  • Academy school

School phase

Required

Select the phase or phases covered by the assessment.

Choose one

  • Primary
  • Secondary

Name of the processing activity

Required

Use a specific name that can be matched to the school's records of processing activities.

Enter processing activity name

Actual purpose of the processing

Required

Describe what the school is trying to achieve through this specific processing. Avoid describing a broad or unrelated organisational aim.

Describe the specific processing purpose

Personal information involved

Required

Describe the categories of personal information and the main data subjects involved.

Describe the personal information and data subjects

Does the processing involve children's personal information?

Required

Select this where pupils or other children are among the data subjects. If selected, complete the children's interests section below.

  • Tick when complete

Consideration of children's interests

Required

Where children's personal information is involved, explain the extra care taken to protect their interests, including any age, vulnerability, safeguarding, transparency or proportionality considerations. If children are not involved, record that this section is not applicable.

Record the consideration of children's interests or explain why this is not applicable

Public task or official authority assessment

Basis being assessed

Required

Identify the route that most accurately describes the proposed reliance.

Choose one

  • Task in the public interest
  • Exercise of official authority
  • Both public task and official authority are being considered

Relevant task or official authority

Required

Identify the specific public-interest task or official authority that the school says is relevant to the processing.

Describe the relevant task or official authority

Sufficiently clear basis in law

Required

Cite or describe the legislation, statutory function, delegated authority, statutory guidance or other legal provision that provides the relevant task or authority. Explain why it is sufficiently clear for this processing.

Identify and explain the relevant basis in law

Necessity analysis

Required

Explain why processing personal information is necessary to perform the identified public-interest task or exercise the official authority. Address why the purpose cannot reasonably be achieved without this processing.

Explain why the processing is necessary

Less intrusive alternatives considered

Required

Describe alternatives considered, such as using less personal information, a smaller group of data subjects, a shorter retention period or a different process, and explain why the selected approach is necessary.

Record alternatives and why they were not selected

Does the processing also involve special category or criminal offence data?

Required

Select this if the activity involves either category. Any additional condition required for that type of data must be assessed separately.

Choose one

  • Neither
  • Special category data
  • Criminal offence data
  • Both special category and criminal offence data

Findings supporting the assessment

Required

Record the evidence, reasoning and conclusions supporting whether the public-task or official-authority criteria are met for this processing purpose.

Record the findings and supporting reasoning

Assessment outcome

Required

Record the current decision based on the documented assessment.

Choose one

  • Public task or official authority is supported as the proposed lawful basis
  • The assessment does not support relying on public task or official authority
  • Further legal, governance or operational work is required before a decision
  • The basis is not applicable to this processing purpose

Reason for the outcome

Required

Explain how the outcome follows from the task or authority, legal basis, necessity analysis, children's interests where relevant and recorded findings.

Explain the assessment outcome

Approval and review history

Assessment prepared by

Required

Enter the name and role of the person who completed this record.

Name and role

Assessment date

Required

Enter the date on which this assessment was completed.

Day
Month
Year

Approver or accountable decision-maker

Required

Enter the name and role of the person responsible for reviewing and approving the recorded assessment or decision.

Name and role

Approval or decision date

Required

Enter the date on which the approver reviewed and recorded the decision.

Day
Month
Year

Reason for the next review

Required

Select all events that should trigger review of this assessment.

Choose all that apply

  • Scheduled periodic review
  • Change to the processing purpose
  • Change to the personal information or data subjects
  • Change to legislation, statutory function or relevant authority
  • Material change to the processing method or technology
  • Relevant complaint, incident, audit finding or challenge
  • Other

If other, please specify

Next planned review date

Required

Enter the next planned review date, taking account of changes that could affect the assessment.

Day
Month
Year

Review history and changes

Required

Record previous review dates, reviewers, changes to the assessment, updated findings and resulting decisions. If this is the first review, record that it is the initial assessment.

Record the review history

Record completeness confirmation

Required

Confirm that the record contains the relevant task or authority, the legal basis in law, the necessity analysis, the findings and the decision or current status.

  • Tick when complete
CalmCompliance · v1Template for adaptation

Template details

Type
Form
Version
v1
Updated
7 October 2026
Reviewed
7 October 2026

Get this template

Free, editable Word document. We’ll email you a download link. No Calm account needed.

Edit in Word or Google Docs.

We record your email and the template you request. Read our privacy policy.