GDPR

What is the General Data Protection Regulation?

The General Data Protection Regulation (GDPR) is a piece of EU-wide legislation which determines how people’s personal data is processed and kept safe, and the legal rights individuals have in relation to their own data. It applied from 25 May 2018 to organisations that process or handle personal data, including schools. 

It's similar to the Data Protection Act (DPA) 1998 in many ways. Most of the differences involve the GDPR building on or strengthening the principles of the DPA. 

The Full General Data Protection Regulation has been published by the Council of the EU.

The UK has implemented the GDPR despite its intention to leave the EU. 

Guide to the UK General Data Protection Regulation (UK GDPR)

• Data Protection Policy
• ILP Subject Access Request Form

 Making a Freedom of Information or Subject Access Request

Should you require any further information, or if you wish to make a Data Subject Access Request or a Freedom of Information request, the Trust’s Data Protection Officer (DPO), can be contacted here.

You would need to specify exactly what information it is that you require, the form in the link below may help with your request and you may also be asked for two forms of identification.

A Subject Access Request Form can be downloaded here.

A school has 20 school days or 60 working days (whichever is the shortest) to respond to a FOI request.

A school has 1 month to respond to a SAR request.