Home Page

General Data Protection Regulations (GDPR)

General Data Protection Regulations (GDPR) – 25th May 2018

We collect and use pupil information under section 537A of the Education Act 1996, and Section 83 of the Children Act 1989.  We also comply with Article 6 (1) ( C ) and Article 9 ( 2 ) (b) of the General Data Protection Regulation (GDPR)


We use the pupil data:

  • To support pupil learning
  • To monitor and report on pupil progress
  • To provide appropriate pastoral care
  • To comply with the law regarding data sharing

Categories of pupil information that we collect, hold and share include:

  • Personal information (such as name, unique pupil number and contact details)
  • Characteristics (such as ethnicity, language, nationality, country of birth and free school meal eligibility)
  • Attendance information (such as sessions attended, number of absences and absence reasons)
  • National curriculum assessment results
  • Special education needs information
  • Relevant medical information


Under the GDPR, the data protection principles set out the main responsibilities for organisations: 


Rodborough Community Primary School has a statutory duty to comply with the requirements of the GDPR as it collects data about pupils and adults associated with the school for school business.  The school is also required to produce a privacy notice explaining how information is collected and processed.


All of the information we hold on individuals follows the six key principles:

  1.  Fair, lawful and transparent
  2. Collected for specified, explicit and legitimate purposes
  3. Adequate, relevant and limited to what is necessary
  4. Accurate, and where necessary, kept up to date
  5. Kept in a form which permits identification for no longer than is necessary
  6. Processed in a manner that ensure appropriate security


We routinely share pupil information with:

  • Schools or colleges that the pupils attend after leaving us
  • Our local authority (Gloucestershire County Council) and their commissioned providers of local authority services
  • The Department for Education (DfE)


We do not share information about our pupils with anyone without consent unless the law and our policies allow us to do so.


We are required by law, to provide information about our pupils to the DfE as part of statutory data collections such as the school census and early years’ census.  Some of this information is then stored in the NPD (National Pupil Database) The law that allows this is the Education (Information About Individual Pupils) (England) Regulations 2013.


To find out more about the pupil information we share with the department, for the purpose of data collections, go to


To find out more about the NPD, go to


The department may share information about our pupils from the NPD with third parties who promote the education or well-being of children in England by:


  • Conducting research or analysis
  • Producing statistics
  • Providing information, advice or guidance


The Department has robust processes in place to ensure the confidentiality of our data is maintained and there are stringent controls in place regarding access and use of the data. 


Requesting access to your personal data

Under data protection legislation, parents and pupils have the right to request access to information about them that we hold.  To make a request for your personal information, or be given access to your child’s education record, contact the Data Protection Lead, Cristina Martindale, via the school office or email


Designated Data Protection Officer – Gloucestershire Local Authority

Data Lead for School – Cristina Martindale


To learn more about the General Data Protection Regulation, please visit the Information Commissioner’s Office (ICO)  website on