Governor Committee Finance and Premises Committee Chair of Governors signature Date of publication May 2018 Review date June 2019 Introduction On the 25th May 2018 the General Data Protection Regulation (GDPR) will be applicable and the current Data Protection Act (DPA) will be updated by a new Act giving effect to its provisions. Before that time the DPA will continue to apply. This Policy sets out the manner in which personal data of staff, students and other individuals is processed fairly and lawfully. The School collects and uses personal information about staff, students, parents or carers and other individuals who come into contact with the School. This information is gathered in order to enable it to provide education and other associated functions. In addition, there may be a legal requirement to collect and use information to ensure that the School complies with its statutory obligations. The School is a data controller and must therefore comply with the Data Protection Principles in the processing of personal data, including the way in the data is obtained, stored, used, disclosed and destroyed. The School must be able to demonstrate compliance. Failure to comply with the Principles exposes the School and staff to civil and criminal claims and possible financial penalties. Details of the School's purpose for holding and processing data can be viewed on the data protection register: The Schools registration number is Z6611880. This registration is renewed annually and up dated as and when necessary. Aim This Policy will ensure: The School processes person data fairly and lawfully and in compliance with the Data Protection Principles. All staff involved with the collection, processing and disclosure of personal data will be aware of their duties and responsibilities under this policy. That the data protection rights of those involved with the School community are safeguarded. Confidence in the School’s ability to process data fairly and securely. Scope
Governor Committee Finance and Premises Committee Chair of Governors signature Date of publication May 2018 Review date June 2019 Introduction On the 25th May 2018 the General Data Protection Regulation (GDPR) will be applicable and the current Data Protection Act (DPA) will be updated by a new Act giving effect to its provisions. Before that time the DPA will continue to apply. This Policy sets out the manner in which personal data of staff, students and other individuals is processed fairly and lawfully. The School collects and uses personal information about staff, students, parents or carers and other individuals who come into contact with the School. This information is gathered in order to enable it to provide education and other associated functions. In addition, there may be a legal requirement to collect and use information to ensure that the School complies with its statutory obligations. The School is a data controller and must therefore comply with the Data Protection Principles in the processing of personal data, including the way in the data is obtained, stored, used, disclosed and destroyed. The School must be able to demonstrate compliance. Failure to comply with the Principles exposes the School and staff to civil and criminal claims and possible financial penalties. Details of the School's purpose for holding and processing data can be viewed on the data protection register: The Schools registration number is Z6611880. This registration is renewed annually and up dated as and when necessary. Aim This Policy will ensure: The School processes person data fairly and lawfully and in compliance with the Data Protection Principles. All staff involved with the collection, processing and disclosure of personal data will be aware of their duties and responsibilities under this policy. That the data protection rights of those involved with the School community are safeguarded. Confidence in the School’s ability to process data fairly and securely. Scope
School-Data-Protection-Policy-2018-2019.docx