General Data Protection Regulations (GDPR) – 25th May 2018
We collect and use pupil information under section 537A of the Education Act 1996, and Section 83 of the Children Act 1989. We also comply with Article 6 (1) ( C ) and Article 9 ( 2 ) (b) of the General Data Protection Regulation (GDPR)
We use the pupil data:
Categories of pupil information that we collect, hold and share include:
Under the GDPR, the data protection principles set out the main responsibilities for organisations: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/principles
Rodborough Community Primary School has a statutory duty to comply with the requirements of the GDPR as it collects data about pupils and adults associated with the school for school business. The school is also required to produce a privacy notice explaining how information is collected and processed.
All of the information we hold on individuals follows the six key principles:
We routinely share pupil information with:
We do not share information about our pupils with anyone without consent unless the law and our policies allow us to do so.
We are required by law, to provide information about our pupils to the DfE as part of statutory data collections such as the school census and early years’ census. Some of this information is then stored in the NPD (National Pupil Database) The law that allows this is the Education (Information About Individual Pupils) (England) Regulations 2013.
To find out more about the pupil information we share with the department, for the purpose of data collections, go to https://gov.uk/education/data-collection-and-censuses-for-schools
To find out more about the NPD, go to https://www.gov.uk/government/publications/national-pupil-database-user-guide-and-supporting-information
The department may share information about our pupils from the NPD with third parties who promote the education or well-being of children in England by:
The Department has robust processes in place to ensure the confidentiality of our data is maintained and there are stringent controls in place regarding access and use of the data.
Requesting access to your personal data
Under data protection legislation, parents and pupils have the right to request access to information about them that we hold. To make a request for your personal information, or be given access to your child’s education record, contact the Data Protection Lead, Cristina Martindale, via the school office or email firstname.lastname@example.org
Designated Data Protection Officer – Gloucestershire Local Authority
Data Lead for School – Cristina Martindale
To learn more about the General Data Protection Regulation, please visit the Information Commissioner’s Office (ICO) website on http://ico.org.uk