General Data Protection Regulations (GDPR) – 25th May 2018
We collect and use pupil information under section 537A of the Education Act 1996, and Section 83 of the Children Act 1989. We also comply with Article 6 (1) ( C ) and Article 9 ( 2 ) (b) of the General Data Protection Regulation (GDPR)
We use the pupil data:
To support pupil learning
To monitor and report on pupil progress
To provide appropriate pastoral care
To comply with the law regarding data sharing
Categories of pupil information that we collect, hold and share include:
Personal information (such as name, unique pupil number and contact details)
Characteristics (such as ethnicity, language, nationality, country of birth and free school meal eligibility)
Attendance information (such as sessions attended, number of absences and absence reasons)
National curriculum assessment results
Special education needs information
Relevant medical information
Under the GDPR, the data protection principles set out the main responsibilities for organisations: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/principles
Rodborough Community Primary School has a statutory duty to comply with the requirements of the GDPR as it collects data about pupils and adults associated with the school for school business. The school is also required to produce a privacy notice explaining how information is collected and processed.
All of the information we hold on individuals follows the six key principles:
- Fair, lawful and transparent
- Collected for specified, explicit and legitimate purposes
- Adequate, relevant and limited to what is necessary
- Accurate, and where necessary, kept up to date
- Kept in a form which permits identification for no longer than is necessary
- Processed in a manner that ensure appropriate security
We routinely share pupil information with:
- Schools or colleges that the pupils attend after leaving us
- Our local authority (Gloucestershire County Council) and their commissioned providers of local authority services
- The Department for Education (DfE)
We do not share information about our pupils with anyone without consent unless the law and our policies allow us to do so.
We are required by law, to provide information about our pupils to the DfE as part of statutory data collections such as the school census and early years’ census. Some of this information is then stored in the NPD (National Pupil Database) The law that allows this is the Education (Information About Individual Pupils) (England) Regulations 2013.
To find out more about the pupil information we share with the department, for the purpose of data collections, go to https://gov.uk/education/data-collection-and-censuses-for-schools
To find out more about the NPD, go to https://www.gov.uk/government/publications/national-pupil-database-user-guide-and-supporting-information
The department may share information about our pupils from the NPD with third parties who promote the education or well-being of children in England by:
- Conducting research or analysis
- Producing statistics
- Providing information, advice or guidance
The Department has robust processes in place to ensure the confidentiality of our data is maintained and there are stringent controls in place regarding access and use of the data.
Requesting access to your personal data
Under data protection legislation, parents and pupils have the right to request access to information about them that we hold. To make a request for your personal information, or be given access to your child’s education record, contact the Data Protection Lead, Cristina Martindale, via the school office or email sbm@rodborough.gloucs.sch.uk
Designated Data Protection Officer – Gloucestershire Local Authority
Data Leads for School – Mrs. Callaghan-Wright and Mrs. Messenger.
To learn more about the General Data Protection Regulation, please visit the Information Commissioner’s Office (ICO) website on http://ico.org.uk