Education authorities may process students' (and where needed parents') data for their Education Act functions, and may require institutions by written request to supply student and parent data; special categories may be requested only with the explicit consent of the parent or guardian; attainment and ability data must reach them pseudonymised, follow-up staying with the institution; reconciliation data from examination bodies may be used only for reconciliation, without identifiable results, and anonymised, deleted or destroyed immediately after; targeted-policy and employment-study data are limited (only students over compulsory school age, identifiable data only where strictly required) and deleted or anonymised when the service or initiative ends unless consent is given.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.