GDPR sets out the key principles that all personal data must be processed in line with.
Data must be: processed lawfully, fairly and transparently; collected for specific, explicit and legitimate purposes; limited to what is necessary for the purposes for which it is processed; accurate and kept up to date; held securely; only retained for as long as is necessary for the reasons it was collected
There are also stronger rights for individuals regarding their own data.
The individual’s rights include: to be informed about how their data is used, to have access to their data, to rectify incorrect information, to have their data erased, to restrict how their data is used, to move their data from one organisation to another, and to object to their data being used at all
We would also like to remind you that there is some data that we process that we do not need your consent to do so. This includes sharing any child protection concerns with Social care, some educational referrals for support, census data with the DfE, assessment data with other teachers to support moderation or pupils data to send to transition schools.
We will ask for consent if we are completing some referrals to external agencies. We will ask for your consent to share your data as part of the referral. There may be other times that we ask for your consent. This will be if your child’s education or welfare will not be effected if you refuse consent.
You can read further into GDPR by viewing our policy and letters to parents below.
If you have any questions about how the GDPR affects you, or how our school is preparing, you can contact myself as the Data protection school lead or Lauri Almond. She can be contacted on her email address DPO@essex.gov.uk or her telephone number is 03330 322970.