Subject: AI processing of my child’s data, withdrawal of consent, objection, and erasure request
Dear Data Protection Officer,
I am the parent of [child’s full name], date of birth [DD Month YYYY], and I have parental responsibility. This letter exercises rights under the UK GDPR and the Data Protection Act 2018 regarding the use of Artificial Intelligence tools in relation to my child’s information held by Leeds City Council, including Children and Families and SEND services.
I require the following.
- Withdrawal of consent
I withdraw any consent, explicit or implied, for the Council or its staff to use my child’s personal data in any AI tool, including large language model assistants, chat or summarisation tools, document analysis tools, and meeting transcription or summarisation features. This includes, without limitation, Microsoft Copilot, Azure OpenAI, OpenAI ChatGPT, Google Gemini, and any similar tools. Treat this as effective immediately. - Objection to processing
I object under Article 21 to any continued processing of my child’s data in AI systems on a public task or legitimate interests basis. I require you to record a clear flag on all relevant systems that my child’s data must not be processed using AI. - Right to erasure and restriction
If my child’s data has been entered into any AI tool, I request erasure under Article 17, including deletion of prompts, uploaded files, generated outputs, logs, caches, and any copies held by processors or sub processors. Where you consider erasure not possible due to a legal obligation, apply restriction under Article 18 and confirm what processing, if any, will continue. - Confirmation of past or current AI use
Please confirm whether any of my child’s personal data has been processed in any AI system. If yes, provide:
- The dates, purposes, and categories of data used
- The lawful basis under Article 6, and the Article 9 condition for special category data
- The names of all vendors and sub processors, locations of processing, and any international transfers and safeguards
- Retention periods and deletion status
- Copies of any prompts, files, transcripts, or documents uploaded, and all outputs generated that include or were derived from my child’s data
- Any automated decision making or profiling applied, and meaningful information about the logic involved, the significance, and the likely effects, as required by Article 22
- Transparency and governance documents
Please provide the following. If you consider any of these not to be personal data, treat this part as a Freedom of Information request.
- The Data Protection Impact Assessment(s) that cover AI use in Children and Families or SEND case handling
- The relevant Record of Processing Activities entries for AI use
- Article 28 processor agreements and data sharing agreements with any AI vendors used for casework, transcription, or document analysis
- Staff guidance or policy that governs staff use of AI tools with personal data, including rules for case documents and meeting recordings
- Basis for any prior processing without consent
If my child’s data has already been uploaded to any AI tool, explain why consent was not sought, the lawful basis relied upon, and how this complies with ICO guidance on consent and public sector imbalance of power. Provide a copy of the privacy notice that covers AI use and the date it was presented to families. - Future assurance
Confirm in writing that a permanent marker has been placed on my child’s records to prevent any use of AI tools with her data, and that staff have been instructed accordingly.
Please respond within one calendar month in line with Article 12. For any FOI elements, please respond within 20 working days. If you require proof of identity or proof of parental responsibility, please let me know promptly. If you consider any exemption applies, please explain it in full and set out my rights to complain.
If this matter is not resolved, I will raise a complaint with the Information Commissioner’s Office.
Yours faithfully,
[Your name]
Parent of [child’s full name], DOB [DD Month YYYY]
Enclosures, [proof of ID]