As general good practice for GDPR, staff should only see the pupil data that they need to see. It would be nice if we could restrict access to pupil data by division. For example, a teacher who only teaches in the sixth form does not need to see pupil data for the babies in the nursery, but at the moment we have no control over this.
