Send us a message 0208 726 6000
Send us a message
"Excellence is an art won by training and habituation. We do not act rightly because we have virtue or excellence, but we rather have those because we have acted rightly. We are what we repeatedly do. Excellence, then, is not an act but a habit."
"Providing innovation, excellence and expertise to schools and academies across London and the South East."
What is GDPR?
The GDPR, which stands for General Data Protection Regulation, will give individuals more control over how their personal information is used and give companies a clearer, simpler policy to follow. The ways in which data is used has moved on since the Data Protection Act of 1998 was introduced.
Who is responsible for data protection in my school?
Each school should have a designated Data Protection Officer. MATs can appoint one Officer to act across the trust.
How long should my school keep data for?
There are no hard and fast rules regarding the keeping of personal data, only that once it has been used for the purpose of its collection it should then be deleted. The only overriding rule will be if the data needs to be kept because of a requirement by law.
However, it is worth bearing in mind that an individual has the right to have their personal data deleted if there is no legal requirement to keep it.
How does this affect my school?
Schools should already be working in line with to the current Data Protection Act and so implementing the new regulation should not be as onerous as it sounds because it is building on the current Data Protection Act requirements.
However, it is easy to become complacent where Data Protection is concerned and therefore it is essential to plan your approach to GDPR compliance early and to get key staff in your school onboard.
Below are a few simple steps your school can take to ensure you are getting ready to comply with the GDPR:
Further information can be found at the Information Commissioners’ Office web site https://ico.org.uk/.
If you have a query about this article please do contact email@example.com We will be providing further guidance and training about GDPR over the coming months.