The GDPR provides the following rights for individuals:
1. The school will provide concise, transparent, intelligible and easily accessible information about the processing of personal data to individuals via the Privacy Notice. This will be written in clear plain language and will clearly set out how personal data is processed within the school.
2. The school will provide individuals with access to their personal data and supplementary information; this will be processed as a subject access request.
Subject Access Requests will be free of charge and processed in line with the statutory requirements and timeframes.