UK GDPR – Data Protection at St Anne’s                                                                                   

We have been protecting personal data since data protection legislation first came into force in 1998, and the school already takes great care with the information entrusted to us.

On 25 May 2018, the legislation changed with the introduction of the UK General Data Protection Regulation (UK GDPR). This focuses on how we collect, use, store, share, and dispose of personal data relating to our pupils, parents and carers, staff, and other individuals.

We are already compliant in most areas, and this legislation provides an opportunity to further strengthen our robust and secure systems for managing both electronic and paper records.

Over the past few months, we have been working towards full compliance. Some systems have already been updated, while others are currently being reviewed. UK GDPR affects all of us, and we ask parents and carers to support these changes to help ensure the secure transfer and processing of information by:

• Reading the school’s privacy notices
• Responding to consent and permission requests sent by email and confirming your preferences
• Informing us of any changes to your consent preferences

Privacy Notices

Schools are required to publish privacy notices explaining:

• What information we collect
• Why we collect it
• How it is stored
• Who it may be shared with (where appropriate)
• How long it is retained
• Your rights in relation to your personal data

Privacy notices for parents and carers and for pupils are available within our policies, see below.

Permissions and Consent

The school is required to collect certain information to carry out its core functions, including providing education and ensuring the welfare and wellbeing of children. This information is collected under a legal obligation, and no additional consent is required.

However, there are some activities outside our core functions where we do require consent. These may include:

• Extra-curricular activities
• FOSA
• School events and similar activities

For these purposes, we will seek specific consent, which must be freely given, informed, and unambiguous.

How long we keep information 

The school follows the IRMS Information Management Toolkit for Schools as its information retention policy.

Ongoing Review

Over the coming weeks and months, we will continue to review and update the forms and policies used in school to ensure they remain compliant with UK GDPR.

If you have any questions or concerns, please do not hesitate to contact the School Business Manager.