gain consent would place a child at risk, and • for schools, not providing pupils’ personal data where the serious harm test under the legislation is met.36 For example, in a situation where a child is in a refuge or another form of emergency accommodation, and the serious harm test is met, they must withhold providing the data in compliance with schools’ obligations under the Data Protection Act 2018 and the UK GDPR. Where in doubt schools should seek independent legal advice. 119. The Data Protection Act 2018 and UK GDPR do not prevent the sharing of information for the purposes of keeping children safe. Fears about sharing information must not be allowed to stand in the way of the need to safeguard and promote the welfare and protect the safety of children. 120. Further details on information sharing can be found: • in Working Together to Safeguard Children, which includes a myth-busting guide to information sharing • at Information Sharing: Advice for Practitioners Providing Safeguarding Services to Children, Young People, Parents and Carers. The seven golden rules for sharing information will be especially useful • at The Information Commissioner’s Office (ICO), which includes information about your obligations and how to comply, including protecting personal information, and providing access to official information • in Data protection: toolkit for schools - Guidance to support schools with data protection activity, including compliance with the UK GDPR. 36 The harm test is explained on the Disclosure and Barring service website on GOV.UK. Section 31(9) of the Children Act 1989 as amended by the Adoption and Children Act 2002, available at legislation.gov.uk 35 121. Where children leave the school or college, the designated safeguarding lead should ensure their ch