Data Protection Act 2018 and the General Data Protection Regulations (GDPR)

Privacy Notices:  Layer one

Data Protection Act 2018: How we use pupil information

We collect and hold personal information relating to our pupils and parents/carers and may also receive information about them from their previous school, local authority and/or the Department for Education (DfE). We use this personal data to: 

• support our pupils' learning
• monitor and report on their progress
• provide appropriate pastoral care; and
• assess the quality of our services
• communicate with Parents/Carers 

This information will include their contact details, national curriculum assessment results, attendance information, any exclusion information, where they go after they leave us and personal characteristics such as their ethnic group, any special educational needs they may have as well as relevant medical information. 

We will not give information about our pupils to anyone without your consent unless the law and our policies allow us to do so. If you wish to receive a copy of the information about your son/daughter that we hold, please contact:

Mrs. Justine Turner or Mrs. Stephanie Tilling, the school administrators via the school office. Telephone 01473 658303.

We are required, by law, to pass certain information about our pupils to our local authority {LA} and the Department for Education (DfE).

DfE may also share pupil level personal data that we supply to them, with third parties. This will only take place where legislation allows it to do so and it is in compliance with the Data Protection Act 2018 and also please see our school Data Proctection Policy.

Decisions on whether DfE releases this personal data to third parties are subject to a robust approval process and are based on a detailed assessment of who is requesting the data, the purpose for which it is required, the level and sensitivity of data requested and the arrangements in place to store and handle the data. To be granted access to pupil level data, requesters must comply with strict terms and conditions covering the confidentiality and handling of data, security arrangements and retention and use of the data.

For more information on how this sharing process works, please visit: https://www.gov.uk/guidance/national-pupil-database-apply-for-a-data-extract

For information on which third party organisations (and for which project) pupil level data has been provided to,   please visit: https://www.gov.uk/government/publications/national-pupil-database-requests-received

 If you need more information about how our local authority and/or DfE collect and use your information, please visit:

• our local authority or the DfE website

Data Protection

The General Data Protection Regulation (GDPR) is EU-wide legislation that will apply to all organisations, including schools, from 25th May 2018. The GDPR determines how people’s personal data is processed and stored. Also, the GDPR sets out the legitimate purposes for using people’s personal data. The term ‘personal data’ refers to any information that can identify a person.

We ask for parents’ consent to use children’s personal data in certain ways. For example, we seek explicit consent from parents to publish photographs of children.

At Elmsett C of E VC Primary School, policies and procedures are designed with privacy at their core.

The GDPR requires us to update our Privacy Notices, which inform you about how we use personal data. The school’s Privacy Notices can be viewed here: Employee Privacy Notice, Job Applicant Privacy Notice or the Parent Privacy Notice.  A Subject Access Request can be made by using this form.

Under the GDPR, schools must appoint a Data Protection Officer, who will advise on compliance and liaise with the Information Commissioner’s Office if necessary. If there is a serious data breach, the Data Protection Officer must notify the individuals affected and the Information Commissioner’s Office. Contact details for the school’s Data Protection Officer are below:

Data Protection Officer: Sarah Ingram at Schools Choice on (01473) 944579 or email. sarah.ingram@schoolschoice.org

If parents require any further information about data protection or the GDPR, please contact the Headteacher, Miss L. Hilton, via the school office on (01473) 658303.