GDPR, which came into force on 25 May 2018 as the Data Protection Act 2018, is a step change in data protection and privacy law in the UK. As a school we collect and hold a great deal of personal data - not only about pupils, but also staff, parents, volunteers, suppliers and other 'data subjects'. We take our responsibility as custodians of this data very seriously and embrace the opportunities GDPR provides to make improvements in how we handle data. GDPR is a long term project and we are committed to developing a privacy programme that becomes a cornerstone of our approach to data in school.
We have appointed an external organisation, Data Protection Education Ltd as our Data Protection Officer.