The new General Data Protection Regulation replaced the Data Protection Act to strengthen and unify all data held within an organisation. For schools it brings a new responsibility to inform parents how they are using their pupils' data and who they are sharing it with. Much of the processing of personal data falls under a specific legal basis which means that specific consent will not be needed in the majority of cases. However, consent must be given to anything which involves a third party managing this data and so parents will be asked to sign a privacy notice giving this consent. Any data breaches which may have a detrimental effect on the data subject must be reported to the Information Commissioner's office within 72 hours.
Organisations we share your data with:
SIMS - Capita