What is GDPR?

The GDPR is Europe’s new framework for data protection laws, it came into force on 25th May 2018 at the same time as the UK’s Data Protection Act 2018 (DPA 2018).

These regulations work together to control the way information is collected, stored and processed. Many organisations including schools, academies and other educational establishments now operate within this new legal framework.

Although the UK has now left the EU the GDPR remains in force, alongside the DPA 2018, and this will continue to be the case for the foreseeable future.

What are your rights?

Under the GDPR you are provided rights as an individual;

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling.

How is school data used?

A great deal of the processing of personal data undertaken by schools will fall under a specific legal basis, ‘in the public interest’. As it is in the public interest to operate schools successfully, it will mean that specific consent will not be needed in the majority of cases in schools.

Data Protection Officer

Our appointed DPO will oversee compliance with data protection. If you have any questions about how we handle your personal information you can contact the DPO directly;

Name: Mr Stephen Brierley


Telephone:  01744 671930