Thanks for all the replies all.
It is incredibly confusing as nobody really knows when the Data Protection Act comes into force and when it doesn't with regards to photographing children (mainly other people's). I'm going to be working freelance for the school soon and therefore my query was in relation to this. The school is still stuck in the 1960's for technology and I'm working to turn this around. I therefore needed knowledge of what my rights would be in photographing the pupils.
The school and I have come to an agreement that anything officially photographed for the school and placed in the public domain mustn't include the children's names. When a child's name needs to be used, written permission needs to be obtained from the parent/guardian.
You are being a bit sweeping here. The data protection act is pretty clear, it is simply about the collection of data. In essence shooting photographs is not covered by the act - in the same way that writing an essay with a fountain pen is. The DPA is relevant if you use the photgraphs as part of the school records - i.e. they are tied to other data the school has about a child. Without being funny, schools must have loads of info about children - names, addresses, medical stuff, DOB, parent names etc.. so the schools ought to know about the implication of the DPA better than anyone.
So if you shoot pictures of children, thats fine, if you put them in the file / on the computer system, on a passcard etc.. then you essentially you then have to comply with the DPA
The data in a school that is covered by the act will include any personal data about staff, parents or pupils. CRB checks are totally another story, and just assess and certify an individual to be safe (or not) to work with children or vunerable adults. The onus is on the employer / authoritory / orgganisation involved to satisfy themselves that an adult complys and is safe. It isnt the begginging or end of the rules - it ought to be a single part of the big plan to keep kids safe
The reason we (as photographers) can go and work in schools without a CRB check (done by the individual school) is that we are supervised by staff that are. The moment we work alone, we become responsible for the kids, and our own actions, so we need to be checked - hence a CRB check
Back to dthe DPA - someone in you school will be the compliance officer, and essentially it is thier responsibility to make sure the organisaton has the procedures in place to ensure propper complaince. If there is a grey area, or unsure area, they wil lbe able to call a helpline, where they themselves can get advice. The whole DPA thing isnt that hard
The area of confusion comes when ill-informed people in organisations (police, schools etc) make rules, wrongly citing the DPA or CRB compliance as the reason for (or not) doing something. If this ended up in court, it will be a really simple black and white thing
again the whole thing comes about because there are often differences between
1. what you are legally allowed to do
2. what an organisation lets you do
3. what you think the rules should be
4. what the rules were last year
5. what the rules are in the organisation down the road
6. what the newspapers say