From 25 May 2018, a new EU-wide data protection law, the General Data Protection Regulation or GDPR, comes into force. The underlying principles of this law are not new. Under both the UK’s 1998 Data Protection Act and GDPR, organisations must only collect, hold, use and share personal data if they have a lawful basis for doing so and, of course, that personal data must be kept secure. What is new with GDPR is a greater emphasis on transparency and being able to demonstrate compliance with the law.
We are not changing how we collect and process the personal data of our pupils, but in accordance with the requirements of GDPR, we have published a new privacy notice which explains in detail, for the benefit of pupils and their parents or carers, how and why we collect personal data, as well as what we do with it and your rights in relation to data protection. This can be viewed by clicking on this link.
It is the Knowledge Schools Trust, rather than the school, that is the data controller in respect of any data processing undertaken by the school, and the Knowledge Schools Trust's policy on Data Protection can be viewed on it's website or by clicking on this link.