Data Protection at Whitefield Primary School

Our Commitment to Data Protection

Welcome to our school's central repository for all data protection and compliance documentation. As a public authority, we are legally required to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

Our goal is to ensure all personal data we hold on pupils, parents, and staff is processed lawfully, securely, and transparently.

Our Data Protection Officer (DPO)

Our DPO is the person responsible for monitoring our school's compliance with data protection laws, providing advice, and acting as the contact point for the ICO and data subjects.

https://www.gov.uk/guidance/data-protection-in-schools/role-of-data-protection-officers

• DPO Name:  Judicium 

• Contact Email:  dataservices@judicium.com

• Contact Phone: : 0345 548 7000 (option 1, then 1)

If you have a concern or question about how your data is handled, please contact the DPO immediately.

Our delivery of the Data Protection Officer role from Judicium shall include:

1. Providing advice and guidance when required

We will appoint designated consultants to manage your account. He/she will be an expert in this area and

inform and advise your school, and your employees about the obligations that are required to comply with the

UK GDPR and other data protection laws. This will be done by way of reports, information sheets and training.

Telephone and email advice is also available for school leaders.

2. Creating and maintaining data records

We will assist you to create and maintain comprehensive records of all the data processing activities carried

out by the school, including the purpose of all activities, which must be made public upon request.

3. Drafting data policies and procedures

We will assist you to devise and maintain policies and procedures to regulate your processing of personal data

and set out how to interact with external bodies, regulatory authorities, data subjects and information seekers.

4. Providing accredited training for employees

We will offer training to your employees on compliance with UK GDPR and other data protection laws. Our

eLearning courses are available for all roles and employees within the school and are CPD accredited.

Additional live training sessions can be purchased as needed.

5. Acting as the first point of contact with authorities

We will be the first point of contact for supervisory authorities and for individuals whose data is processed.

6. Managing Subject Access Requests and those under Freedom of Information Act

We will manage enquiries under data protection and freedom of information laws, in that we will manage the

data collection process, as carried out by your employees under our direction, and draft the various

correspondences with the data subjects and regulatory authorities.

7. Conducting an annual audit of your data processes

In addition to providing regular updates, we will carry out an annual audit to provide an assessment of whether

your school is following good data protection practice. The audit will look at whether you are following your

policies and procedures and make recommendations for improvements including any new guidance from the

ICO.

Key External Link

We are regulated by the Information Commissioner's Office (ICO), the UK's independent authority on data protection:

• ICO Homepage:  https://ico.org.uk/