The school collects, holds and uses a great deal of information about individuals, particularly pupils and adults connected with the school. Under the Regulation (EU) 2016/679 (General Data Protection Regulation), data about living individuals is known as personal data. The regulation puts in place numerous safeguards for the use of data about individuals.
Under the GDPR, the data protection principles set out the main responsibilities for organisations: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/principles/ Data subjects have the right to access data through a Subject Access Request. All requests will be met within a timely manner, but during school holidays this may become more difficult.
St Nicholas CE Primary Academy has a statutory duty to comply with the requirements of the GDPR as it collects data about pupils and adults associated with the school for school business. The school is also required to produce a privacy notice explaining how information is collected and processed. Information about your rights under GDPR can be found on the Information Commissioner’s website.
The Data Protection Officer is Judy Carter.
All of the information we hold on individuals follows the six key principles: