General Data Protection Regulation (GDPR)
What is GDPR?
This is a European Directive that will be brought into UK law with an updated Data Protection Act for May 2018.
We are currently working hard to make sure we are compliant in all areas.
If you have any questions please contact Mrs Plant, the Business Manager.
The Governing Board have a continuous rolling programme of reviewing and amending our school policies.Therefore our policies will be updated to be GDPR compliant as they are reviewed as part of the process.
Consent
Consent As a school we will seek consent from staff, volunteers, young people, parents and carers to collect and process their data. We will be clear about our reasons for requesting the data and how we will use it. There are contractual, statutory and regulatory occasions when consent is not required. We may process personal and sensitive data without consent if another provision applies. Consent is defined by the UK GDPR as “any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her”. We may seek consent from young people also, and this will be dependent on the child and the reason for processing. Pupils over 13 can give or withdraw consent. Consent and Renewal On the school website we have ‘Privacy Notices’ that explain how data is collected and used. It is important to read those notices as it explains how data is used in detail. Obtaining clear consent and ensuring that the consent remains in place is important for school. We also want to ensure the accuracy of that information. When a pupil joins us, part of the process is to seek consent. This information is retained on the pupil file. If there are any changes, please inform us. We review the contact and consent form on an annual basis There will be a reminders about the need to update us throughout the school year. For Pupils and Parents/Carers On arrival at school you will be asked to complete a form giving next of kin details, emergency contact and other essential information. We will also ask you to give consent to use the information for other in school purposes, as set out on the data collection/consent form. Pupil consent procedure Where processing relates to a child under 13 years old, school will obtain the consent from a person who has parental responsibility for the child. Pupil’s may be asked to give consent or to be consulted about how their data is obtained, shared and used in certain situations. Withdrawal of Consent Consent can be withdrawn, subject to contractual, statutory or regulatory constraints. Where more than one person has the ability to provide or withdraw consent the school will consider each situation on the merits and within the principles of UK GDPR and also child welfare, protection and safeguarding principles. Please complete the appropriate form.
Key Worker Information
In order to comply with the Government’s guidance with regard to shutting schools and providing places for key worker children, it is necessary for us to collect and manage data about these children and their parents/carers in a different way.
Our standard GDPR policy applies, and information found on our privacy notices relating to staff, parents and of course pupils will apply in all cases.
We will use the information that relates to key workers in order to ensure that those children who are entitled to a place at school whilst schools are officially closed are correctly processed, managed and safeguarded.
The Data Controller continues to take its obligations to data processing seriously and will ensure that appropriate safeguards and measures are in place.