GDPR

GDPR means 'General data protection regulation'.

The General Data Protection Regulation (GDPR), which came into effect on 25th May 2018, provides a legal framework for keeping everyone’s personal data safe by requiring companies to have robust processes in place for handling and storing personal information. It’s also designed to protect us as individuals from being contacted by organisations without our express permission.

The School needs to collect personal and sometimes sensitive information to perform its functions and to comply with the requirements of Laws and Regulations. In addition, the School is also responsible for sharing information in accordance with requirements placed upon it.

No matter how it is collected, recorded and used, information must be dealt with properly to ensure compliance with Data Protection legislation.

Processing information in a lawful manner is extremely important to the School and demonstrates clear accountability and transparency to individuals.

Our data protection policy provides an overview of the School’s governance arrangements in respect of managing the information that it processes and it applies to all workers. It includes organisational measures and individual responsibilities which aim to ensure that the School complies with the Data Protection legislation and respects the rights of individuals.