Pupil data: Century Tech AI

The request was refused by The Streetly Academy.

Dear Streetly Academy,

This Feedom of Information request relates to your interaction with Century-Tech Limited (registered number 08482934). (The Company)

Under the Act, most public authorities may take up to a maximum of 20 working days to respond, counting the first working day after the request is received as the first day. For schools, the standard time limit is 20 school days, or 60 working days if this is shorter -- I understand this will begin on return after the Christmas holidays 2018-19.

Please provide copies of:

1) Your contracts, memoranda of understanding, or other agreements (which may include but not exclusively data sharing agreements) between the Trust or school(s) and the company; (Century-Tech Limited or its partners and representatives)

2) Limited with regard only its introduction, School Governor and/ or all Parents' meeting minutes or notes of discussion carried out with them and/or staff, before the Century Tech AI was introduced into the school. [if none known of, please simply state this rather than search all historical documents]

3a) Any Information Governance documents, Data Protection Impact Assessments (or pre-GDPR Privacy Impact Assessments) created by you or the Company with regards to your joint working / project;

3b) If not already listed in 1-3 please provide a list of all the individual data type items, that have been transfered to the Company. (such as but not only, first and last name, DOB, ethnicity, attainment scores, special educational needs, home address and postcode, school name).

4) Copies of any agreement that allows Century Tech (the Company) to use pupil or staff personal data for its AI product training development and how

5) How many (quantity) of pupil and/or staff records (each totalled per school location if used across more than one in your organisation such as a Trust) the company has acquired, has, or has had access to from the academy. (Confirm the extraction date, the planned retention period, and current processing status.)

6) Whether the Company is still using the data today and if so, from how many and which sites, and from its date of first access. If no longer being processed, the date of destruction.

7) Whether the school is using the Company product today and if so, in how many and which sites.

8) Any correspondence / communication / privacy notice regards the introduction and/or ongoing use of the product which has been given to current pupils / pupils' parent/guardians and its interaction with the child regards data collection, processing, profiling or automated decsion-making.

9) Whether you have offered children a Right to Object, or whether the use of the tool has been compulsory.

10) If you offered children a Right to Object, please provide a copy of that notice.

11) If personal data were but are no longer being processed and have been destroyed, a copy of the data destruction notice.

Thank you for your consideration.
Sincerely,

Jen Persson