General Data Protection Regulation (GDPR)

Guidance for GDPR

The General Data Protection Regulation (GDPR) is the new law that will apply to all organisations, including schools, and will take effect from Friday 25 May, 2018. It replaces the Data Protection Act 1998 (DPA 1998) which currently governs the way organisations process personal data about people (pupils, employees etc), and the legal rights that individuals have in relation to the data held on record by an organisation, including schools.

On this page you will find links to a range of articles and supporting materials that can help you better understand what the GDPR will mean to your school - as well as the implications for your pupils, their parents/carers and your employees.

Iain Bradley, Head of Data Modernisation Division at the DfE explains how you can review and improve your handling of personal data ahead of the introduction of the GDPR on 25th May 2018. Watch the video here.

This webinar, from February 2017, looked at best practice when it comes to collecting and using personal information of pupils and staff within educational establishments. It also discussed the ICO’s role and powers if problems with sensitive data occur. It also considered the GDPR, which will become law in May 2018 and discussed its likely impact on schools and how the ICO will help institutions meet the new required standards.

January 2018 - The DfE has issued updated Data protection: privacy notice model documents. The privacy notices have been enhanced to be compliant with the General Data Protection Regulations (GDPR), which comes into force in May 2018. The DfE highlights that these models are simply a recommendation; schools and local authorities are free to review and amend the wording to reflect their individual circumstances. See https://www.gov.uk/government/publications/data-protection-and-privacy-privacy-notices

February 2018 - please click on this link to download a very informative overview of GDPR for Schools by Groupcall, distributed at the recent BETT Show - well worth a read.

April 2018 - Data Protection in schools and colleges: Questions from the Governing Board/Trustees/Directors: This document, produced by South West Grid for Learning is designed to support governors/trustees/directors of schools/colleges in the UK with the upcoming Data Protection changes brought about by the EU General Data Protection Regulation or GDPR. 
 
Throughout this document, the term school/college is used and refers to any UK state-funded educational establishment covered by the Education Act. However, the good practice highlighted in this document is relevant to any educational establishment, whether state-funded or otherwise, but the statutory requirements differ depending upon the type of school. Click this link to download the document.
 

23rd April 2018 - The DFE has issued a BETA version of  "Data protection: a toolkit for schools". Feedback gathered between now and 18th June will be used to inform a revised version. If you wish to comment on the content of this document then please provide feedback to [email protected] with the subject heading “GDPR toolkit feedback”. Download the GDPR Toolkit for Schools (BETA) toolkit here.


Useful links
London Grid for Learning/TRUSTnet GDPR portal

Preparing for GDPR - schoolsweek.co.uk

ICO Overview of GDPR

ICO taking photographs in schools

Protection of Biometric information of children in Schools 

DfE biometric information of children in schools

Information management toolkit

Suggested privacy notices for schools and local authorities to issue to staff, parents and pupils about the collection of data

Data protection guidance for schools considering using cloud services ('the cloud') to hold sensitive information