General Data Protection Regulation (GDPR) are the rules that make up the world’s strongest data protection effort. It was designed to modernise the laws that were in place to protect the personal information of individuals. 

GDPR means that schools have greater accountability for the data they collect. Therefore, any action taken that doesn’t fit in with the normal school procedures requires full consent - especially if any data is handled by a third party. Furthermore, schools are required to:

• Ensure their third party suppliers are GDPR compliant and that all transactions are done with a legally binding contract.
• All data breaches which have a negative effect on the subject must be reported to the Information Commissioners Office (ICO) within 72 hours.

	Data Protection Policy	[pdf 586KB]
	Freedom Of Information Policy	[pdf 636KB]
	Appropriate Policy Document	[pdf 529KB]
	6a Privacy notice - Pupils	[pdf 170KB]
	6b Privacy notice workforce and volunteers	[pdf 156KB]