Information Asset Register (IAR)

An information asset register is a place to record all of your information assets. It helps your school to meet GDPR requirements for personal data (known as your record of processing activities, or article 30 requirements), including all 6 data protection principles, and additionally the requirement to demonstrate accountability, known as the 7th data protection principle. While certain things are mandatory, it can be a useful place to record other pieces of information relating to the personal data you hold in school.

How can I use an information asset register to help me?

Ensure it is comprehensive – this can be done by conducting a records survey to find out where and how information is stored within the school

Keep it up to date

Ensure it is accessible to all information asset owners

Use it to identify potential information risks

Use it to ensure information is shared appropriately

Use it to ensure assets are stored in a secure location