GDPR Compliance

The GDPR (General Data Protection Regulations), which came into force on 25th May 2018 as the Data Protection Act 2018, is a step change in data protection and privacy law in the UK. It’s not just about information technology, but all data we hold as an organisation

It is in place to give data subjects control of their data and gives organisations processing that data (including schools) more responsibilities in relation to how they collect, process, store, share and destroy data. It’s not just about information technology, but all data we hold as an organisation.

As a school we collect and hold a great deal of personal data – not only about students, but also staff, parents, volunteers, visitors, suppliers and other ‘data subjects’. GDPR requires us to not only minimise any risks to the unauthorised access and loss of personal data within the organisation, but also to provide evidence and documentation of our processing activity.

In order to demonstrate our commitment to GDPR compliance we are doing the following:

  • Documenting our processing activity, including ensuring we have a lawful basis for processing
  • Auditing this processing and identifying and creating an action plan to mitigate any risks to personal data
  • Documenting the compliance of third-party providers and reviewing contracts to ensure compliance with GDPR
  • Ensuring that we have processes and procedures in place to ensure the rights of data subjects
  • Reviewing the technical and organisational measures in place to protect data
  • Training staff on GDPR and our data handling procedures – we hope Governor’s will also undertake this training

We have also appointed an external organisation, Data Protection Education Ltd. as our Data Protection Officer.

As a school we collect and process large amounts of data. We take our responsibility as custodians of this data very seriously and embrace the opportunities GDPR provides to make improvements in how we handle data.

GDPR is a long-term project and we are committed to developing a privacy programme that becomes a cornerstone of our approach to data in the school. Whilst there will be changes, we are committed to ensuring that there is no negative impact on teaching and learning and the welfare of students and staff.

For more information contact the school office office@hethersettwoodside.org.uk

The Data Protection Officer can be contacted at dpo@dataprotection.education

Newsletter Update On GDPR

GDPR Data Protection Policy

Data Breach Procedure

SAR Procedure

Privacy Notice for Pupils (Child Friendly)

Photo Consent

Photo Consent Withdrawal

Hethersett Woodside Primary and Nursery School
Coachmaker Way, Hethersett, Norwich NR9 3GN

Headteacher: Mrs Louise Mainwaring
Deputy Headteacher: Mr Sam Carter
Assistant Head teachers: Mrs Nicola Ingham and Mrs Samantha Easey

Tel: 01603 810674

finance@hethersettwoodside.org.uk (Finance and Personnel enquiries)
office@hethersettwoodside.org.uk (Parent / Carer general enquiries)

What 3 Words: reflect.composed.vaulting