From 25th May 2018, the Data Protection Act 1998 (DPA) was replaced by the Data Protection Act 2018 incorporating the General Data Protection Regulation (GDPR) – meaning that the way we manage all personal data and information held within school changed.
Under the previous legislation we already had a duty of care to ensure that this data is kept safe and secure. With the Data Protection Act 2018 we will have an increased responsibility to ensure this information – regardless of what form it’s kept in – is managed in the right way in compliance with the new Act.
Our privacy statement regarding education records can be viewed here.
Privacy notice for parents/carers and pupils