General Data Protection Regulations (GDPR) – 25 May 2018
As a data controller and processor, we have to ensure that the information we hold on pupils, parents/legal guardians and any emergency contacts is essential data and that we have legal grounds to process that data. Where required, we must obtain clear consent and give clear choices to opt out.
Some of the data we hold is exempt from consent. We have a lawful basis for collecting and using pupil information under the Data Protection Act 1998 and the Education Act 1996 (and from Article 6 and Article 9 where data processed is special category data from the GDPR from 25 May 2018). This includes sharing of data with Bradford Council and the Department for Education.
In order to ensure we comply with the new regulations, we have undertaken a data audit and reviewed our current processes. We have updated our admissions forms and produced a new consent form for all pupils. Our updated Privacy Notice which is displayed on our website, specifies how your personal data is processed, stored and shared with 3rd party processors because we have either a lawful basis, a legitimate business interest or your consent.
If you have any further queries regarding data protection, please contact either Sally-Anne Boyes School Business Manager on 01535 210666 or by e-mail to firstname.lastname@example.org