This is from the Scotgov's guidance for dealing with trans pupils:
'2. Consider information sharing carefully:
Do not disclose the transgender identity history or any sensitive information about a transgender young person to anyone inside or outside the school, without considering the young person's view and what is in the best interests of the young person'
www.gov.scot/publications/supporting-transgender-young-people-schools-guidance-scottish-schools/pages/5/
Here's the pertinent bit:
'Article 16 ensures a child's right to privacy. If a young person comes out as transgender there is no immediate need to inform their parents or others. See more on confidentiality and information sharing on page 35.'
Page 35 in guidance:
'A transgender young person may not have told their family about their gender identity.
Inadvertent disclosure could cause needless stress for the young person or could put them at risk and breach legal requirements. Therefore, it is best to not share information with parents or carers without considering and respecting the young person’s views and rights.'
And a footnote takes you to:
'The UK General Data Protection Regulation (UK GDPR) together with the Data Protection Act 2018105 provides the legal framework for the processing of personal data. They regulate the processing, including the collection, use and disclosure of personal data, and gives [sic] individuals certain rights in relation to their personal data. Children have rights in their own regard where they have sufficient maturity and understanding to do so, which they are presumed to do from age 12. This means that schools should ensure that transgender young people’s rights to processing of their personal data including, where relevant, consent should be met, and that their rights in relation to appropriate use of data within schools should be upheld.'
My bold.