GDPR
The General Data Protection Regulation (GDPR) is a European law which came into effect on 25 May 2018.
All schools handle a large amount of personal data. This includes information on pupils such as contact information, grades, medical information, images etc. We also hold information on staff, governors, volunteers and job applicants.
What is Personal data?
This data is already governed by existing DPA (Data Protection Act) regulations which ensure personal data is handled lawfully. However, the GDPR has gone further and requires organisations (including schools) to document how & why they process all personal data.
What is GDPR exactly?
The GDPR is Europe’s new framework for data protection laws – it replaces the previous 1995 data protection directive, which current UK law is based upon. The EU’s GDPR website says the legislation is designed to ‘harmonise’ data privacy laws across Europe as well as give greater protection to individuals.
The categories of pupil information that we collect, hold and share include:
- Personal information (such as name, unique pupil number and address)
- Characteristics (such as ethnicity, language, nationality, country of birth and free school meal
eligibility) - Attendance information (such as sessions attended, number of absences and absence reasons)
- Assessment information
- Safeguarding information
- SEN information
- Behavioural information
- Dietary and medical information
- Emergency contact details
- Consent forms. E.g. pictures on the website and educational visits
- Accident information
- Admission information
Why we collect and use this information
We use the pupil data:
- to keep children safe
- to support pupil learning
- to monitor and report on pupil progress
- to provide appropriate pastoral care
- to assess the quality of our services
- to comply with the law regarding data sharing
For more information on how and why we store information, please see below.
If you would like to see our Data Protection Policy, please visit our Policies page.
