The GDPR provides the following rights for individuals:
1. The school will provide concise, transparent, intelligible and easily accessible information about the processing of personal data to individuals via the Privacy Notice. This will be written in clear plain language and will clearly set out how personal data is processed within the school
2. The school will provide individuals with access to their personal data and supplementary information; this will be processed as a subject access request.
Subject Access Requests will be free of charge and processed in line with the statutory requirements and timeframes.
General Data Protection Regulation The General Data Protection Regulation came into effect across the EU in 2018. It is law that is implemented in exactly the same way across all EU countries to create rules to ensure that all data held and processed by organisations is secure and processed lawfully. Further information about GDPR is available on the ICO website. Schools are required to comply with GDPR and we are fully GDPR compliant, through an number of policies, practices and approaches.