If the records are on paper they are absolutely not covered by the data protection act. Strictly speaking they belong to the CAA but the school is under absolutely no obligation to hand the records over unless the courts tell them to other than a moral one, normally it is not an issue but if there is a debt owed the original school should definitely keep a hold of them until they must hand it over.