The General Data Protection Regulation (GDPR) came into force on 25.5.18 and is designed to modernise laws that protect the personal information of individuals. In the UK, the government has created a new Data Protection Act (2018). It will be enforced in the UK by the Information Commissioner’s Office.
At its core GDPR is a new set of rules designed to give citizens more control over their personal data. There are new rights for people to access the information companies hold about them and obligations for better data management for businesses, including schools. The reforms are designed to reflect the world we’re living in now and brings laws and obligations, including those around personal date, privacy and consent up to speed for the internet-connected age.
Under data protection law, individuals have a right to be informed about how the school uses any personal data that we hold about them. We comply with this rights be providing ‘privacy notices’ where we are processing their personal data. This privacy notice explains how we collect, store and use personal data about pupils.
We, Berkeley Primary School, are the ‘data controller’ for the purposes of data protection law. Our Data Protection Officer is Mrs Jo Vincent. She can be contacted on firstname.lastname@example.org.
Please see the policies and procedures below for more information.