What is GDPR?

In the UK, GDPR replaced the Data Protection Act 1998, which was brought into law as a way to implement the 1995 EU Data Protection Directive. GDPR seeks to give people more control over how organisations use their data, and introduced hefty penalties for organisations that fail to comply with the rules. It also ensures data protection law is almost identical across the EU.

The Data Protection Act 1998 (‘DPA 1998’) applied to the way schools and trusts handled personal data.  Most schools and trusts were familiar with the general requirements of the DPA 1998, for example, the circumstances when they could disclose personal data and what to do if a person submitted a subject access request.

In May 2018, the DPA 1998 was replaced by the General Data Protection Regulations which is often referred to as the ‘GDPR’.  Although many of the principles remain the same as the DPA 1998, there are some important changes which affect the way we process data.

In general terms, the GDPR places more emphasis on transparency, accountability and record keeping.

What does this mean for Kilmorie?

Schools process a lot of personal data relating to pupils and staff in order to carry out its functions.  They also acquire personal data relating to other people including, for example, parents/carers, local governors, trustees, members of the local community, suppliers, contractors and consultants. It is therefore important that all schools ensure they handle personal data carefully and legally.

Kilmorie, as part of the Local Authority, are committed to protecting the privacy and security of personal information and being transparent about the way in which we use the information we hold.  It is our responsibility to make sure we, and our schools, are handling and treating information carefully and legally.

Our school collects a lot of data and information about our pupils, staff, parents and carers so that we can run effectively as a school.  Please our policy links for further information on this and how you can go about requesting this information.