What is The General Data Protection Regulation?
The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a new law to ensure all data held and processed by organisations within the EU is secure and processed lawfully. The EU General Data Protection Regulation (GDPR) became effective on 25 May 2018 and Kingsley Community Primary School is compliant with this.
GDPR at Kingsley
Our school collects, holds and shares information about our pupils and families in order to provide educational services. The school recognises that this information is important and is responsible for the pupils’ information that it holds. As such we take seriously our responsibilities and we are committed to sharing your information responsibly and safely.
Kingsley Primary School is the data controller. This means that we have to look after all the information we collect and use and share it correctly and lawfully. If you want more information about the Data Protection law it is available on the Information Commissioners website at http://www.ico.org.uk.
The categories of pupil information that we collect, hold and share include:
- Personal information (such as name, unique pupil number and address)
- Characteristics (such as ethnicity, language, nationality, country of birth and free school meal eligibility)
- Emergency contact information
- Attendance information (such as sessions attended, number of absences and absence reasons)
- Assessment data
- Exclusions/behavioural information
- Relevant medical information
- Special education needs information
- Safeguarding information
|What does our School do with your data?|
|The reasons we process your data||
|Why we are allowed to process your data||
Legal obligations under various legislation including (but not limited to):
|Who we can share your data with||
Collecting pupil information
Whilst the majority of pupil information you provide to us is mandatory, some of it is provided to us on a voluntary basis (eg information for non-curricular trips and photographs). In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain pupil information to us or if you have a choice in this.
We do not share information about our pupils with anyone without consent unless the law and our policies allow us to do so. We share pupils’ data with the Department for Education (DfE) on a statutory basis. This data sharing underpins school funding and educational attainment policy and monitoring. To find out more about the data collection requirements placed on us by the Department for Education (for example; via the school census) go to https://www.gov.uk/education/data-collection-and-censuses-for-schools.
Requesting access to your personal data
Under data protection legislation, parents have the right to request access to information about them that we hold. To make a request for your personal information, or be given access to your child’s educational record, contact Mrs Whittaker in writing.