- Anti Bullying Policy
- Accessibility Plan
- Accessibility Plan Objectives 2019-2020
- Attendance Policy
- Behaviour Management
- Behaviour Policy
- Capability Policy
- Charging and Remissions Policy
- Child Protection including Safeguarding
- Addendum to Child Protection Policy - COVID19
- Code of Conduct Policy
- Complaints Procedure
- Data Protection Policy
- Dealing with Allegations of Abuse against Members of Staff and Volunteers
- Dorset Admissions Policy 2019-2020
- E Safety Policy
- Early Years Foundation Stage (EYFS) Policy
- Exclusion Policy and Procedures
- GDPR Regulations
- Guidance for schools on records made when there are safeguarding or child protection concerns
- Appendix 1 - Procedure for Access to Personal Information
- Fair Processing Notice
- First Aid
- Grievance Policy
- Health and Safety Policy
- Intimate Care Policy
- Instrument of Government of Community Schools
- Lettings Policy
- Looked After Children
- Mobile Technology
- Offsite Events and Adventurous Activities Policy
- Paying Governors Allowances
- Policy for supporting pupils with medical conditions and managing medicines
- Prevent Risk Assessment
- Private Fostering
- Protection of Biometric Information
- Recruitment and Selection Policy & Procedure
- School Information Report 2018 - 2019
- Social Networking
- Special Educational Needs & Disability (SEND) Policy
- Violence at Work
- Bereavement Policy 2020
- Term Dates
- Pupil Premium
- Disadvantaged Strategy 2020-2021
- Disadvantaged Strategy 2019-2020
- Disadvantaged Strategy 2018-2019
- Sports Premium
- Sports Premium Funding 2019-2020
- Sports Premium Funding 2018-2019
- Emergency Closure
- Reading Support
- Accessibility Policy
- KS1 Phonics Support
- Year 2 SATS Support
Re: General Data Protection Regulations (GDPR)
The 25th May 2018 marked the enforcement of the General Data Protection Regulation (GDPR). The GDPR will replace the Data Protection Act 1998 and is designed to strengthen the safety and security of all data held within an organisation, and make sure processing and storage procedures are consistent.
First and foremost, it is important that you understand your rights under the GDPR; you have the right to:
- Be informed about how we use your personal data.
- Request access to the personal data that the school holds.
- Request that your personal data is amended if it is inaccurate or incomplete.
- Request that your personal data is erased where there is no compelling reason for its continued processing.
- Request that the processing of your data is restricted.
- Object to your personal data being processed.
The GDPR has resulted in some significant changes for the school, meaning that the school have to prove their compliance with the GDPR, by having effective policies in place. There are also changes to the rights that individuals have – such as the right to have your information erased.
Privacy notices must also include new information, such as an individual’s right to complain to the Information Commissioner’s Officer (ICO). The GDPR takes into account the information of children too – parental consent is needed for children up to the age of 13, at which point, the child may be able to consent for themselves.
A data breach notification duty is applied to all schools, and those that are likely to cause damage, e.g. identity theft, have to be reported to the ICO within 72 hours – failure to do so can result in a fine. A data protection impact assessment will be completed, which will likely be carried out when using new technologies and the processing is likely to result in a high risk to the rights and freedoms of individuals.
One of the biggest changes has been in terms of consent; consent must be a ‘positive indication’, which means that it has to be opted into, clear and unambiguous. Any parental consent given to the school under the Data Protection Act 1998 has been reviewed and we have asked all our parents to complete and return a multi-purpose consent form. Parental consents not covered by the multi-purpose consent form may be requested and we will ensure that we ask for your consent as it becomes appropriate to do so.
We are pleased to be able to announce that we have appointed one of our school governors to the role of Data Protection Governor, this will be Mr D Watt. This role will focus on monitoring the schools policies and procedures to ensure compliance with the new GDPR legislation and present an annual report to governors. Finally, schools are required to appoint a data protection officer (DPO) and this will be Mr A Joyce.
Please read the school’s Fair Processing Notice on the school website. It is important that you read and understand the notice, as the school wants to ensure that you know what we are doing with your data and that you know we are acting legally.
When relevant policies have been checked and ratified, they will be published on the school’s website.
For data protection enquiries to the school, please email: firstname.lastname@example.org