How to store a record of consent in DfE SharePoint
You must securely keep a record of consent from every participant in your research in the same Workplace (SharePoint) restricted folder as any other personal data collected in your user research.
Move Word versions of consent forms into the restricted folder and add the 'User research personal data' retention label. Delete any emails containing the consent forms, and delete any copies on your laptop or OneDrive.
Scan or photograph paper consent forms, move the files into the restricted folder and add the 'User research personal data' retention label. Delete any copy on your laptop or OneDrive.
If you are using the MS Forms versions of our approved consent forms, restrict access to the collected responses to only people who need it. You cannot apply retentions labels to data collected in MS Forms, so you will need to set a calendar reminder to manually delete responses.
Records of consent must be deleted no later than 2 years after they were created. They should be the last piece of personal data that you delete, because they are evidence that you can hold other personal data.