Very little to do with us. Principal role or a member of SMT.
You data officer in the school (Principal) to my knowledge would have a document/policy written to what information is collected and why. Also if it's share outside the school, plus how long that information is kept for.