General Data Protection Regulation (GDPR)
From the 25th May 2018, the law is changing and the new General Data Protection Register (GDPR) will become law. As an organisation that gathers and uses data we are required to review our data handling and related procedures.
In principle, with regards to data collection, we are now required to carefully consider the following:
- what data we need from you
- why we need it
- what we will do with it
- where it will be stored
- who we may share it with, and why
- how we will dispose of data
- how long we will keep it
Your Child's Data
As a school we require some essential data from parents. This data can be simply routine information such as your address, contact telephone numbers or details of any medical conditions your child may have. Such information is legally required by schools and ensures that children and their families are well served by the school for routine matters.
In most cases, this data will be provided by you in written form but will then be processed and entered onto the school's information management system (computer system). Please be assured that our systems are
- password protected
- restricted to those with a 'need to know'
- regularly backed up externally
- managed in accordance with the law and local guidance
However, as a school, we also handle and use a much wider variety of data which may include test and assessment data, referrals to other agencies and SEND and medical information.