Data Protection law in the UK is changing in May 2018. It is called the General Data Protection Regulations (GDPR).
The new regulation is about protecting people in the modern information age. It gives more control to individuals and more responsibilities to organisations which collect and hold your data.
What will schools be doing to prepare for GDPR?
What do the school governors do?
What are your rights?
It is important that you know your rights but remember some rights are overridden by the necessity of safeguarding and other key school functions.
Whilst there are a number of important changes under the new regulation the majority of the data protection procedures currently used in schools will still be applicable after May 2018.
Schools have an obligation to be transparent about how personal data is collected, processed and stored. The most common way to provide this information is by the use of privacy notices. Our privacy notice sets out how Curbar Primary School operates within the legal requirements and legitimate interests set out in the GDPR and UK law.
The school continues to work to ensure that all its practices relating to data protection are compliant with the new laws and this has included:
Data Protection Act 1998: How we use pupil information
We collect and hold personal information relating to our pupils and may also receive information about them from their previous school, local authority and/or the Department for Education (DfE). We use this personal data to:
This information will include their contact details, national curriculum assessment results, attendance information, any exclusion information, where they go after they leave us and personal characteristics such as their ethnic group, any special educational needs they may have as well as relevant medical information.
A parent/guardian can request that only their child’s name, address and date of birth be passed to Derbyshire County Council by informing Curbar Primary School’s School Business Officer, Mrs Suzanne Cass. This right is transferred to the child once he/she reaches the age 16. For more information about services for young people, please go to our local authority website http://www.derbyshire.gov.uk/.
To ensure your son or daughter’s information is kept safe we have the following controls/limitations in place:
We will not give information about our pupils to anyone without your consent unless the law and our policies allow us to do so. When you give your consent for your son or daughter’s information to be held and/or shared for any purpose you can withdraw that consent at any time by contacting Mrs Suzanne Cass, School Business Officer in the school office or on 01433630266.
You can also contact Mrs Suzanne Cass if you wish to:
We are required, by law, to pass certain information about our pupils to our local authority (LA) and the Department for Education (DfE).
DfE may also share pupil level personal data that we supply to them, with third parties. This will only take place where legislation allows it to do so and it is in compliance with the Data Protection Act 1998.
Decisions on whether DfE releases this personal data to third parties are subject to a robust approval process and are based on a detailed assessment of who is requesting the data, the purpose for which it is required, the level and sensitivity of data requested and the arrangements in place to store and handle the data. To be granted access to pupil level data, requestors must comply with strict terms and conditions covering the confidentiality and handling of data, security arrangements and retention and use of the data.
For more information on how this sharing process works, please visit: https://www.gov.uk/guidance/national-pupil-database-apply-for-a-data-extract
For information on which third party organisations (and for which project) pupil level data has been provided to, please visit: https://www.gov.uk/government/publications/national-pupil-database-requests-received
If you need more information about how our local authority and/or DfE collect and use your information, please visit:
If you are unable to access these websites, please contact:
For Derbyshire County Council:
Information Governance Officer
Children’s Services Department, Derbyshire County Council
Telephone: 01629 532011
For the Department for Education (DfE):
Public Communications Unit,
Department for Education,
Great Smith Street,
London, SW1P 3BT
Telephone: 0370 000 2288
Should you have any concerns or complaints relating to your son or daughter about how we, as a school, obtain, use, store or share their personal data please contact: Mr Simon Beahan, Headteacher or Mrs Suzanne Cass, School Business Officer on 01433630266.
Please note that Mrs Marie Clark (Headteacher at St. Anne’s, Baslow) is the Data Protection Officer for Curbar Primary School.
If, however you are dissatisfied with our response to your concerns you can of course contact the:
Information Commissioners Office*
Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number,
Fax: 01625 524 510, Website: https://ico.org.uk/
* The Information Commissioners Office deals with concerns and complaints relating to data protection and freedom of information legislation.
For the full letter to parents and for access to the consent forms, please click on the link below: