Data Protection and Privacy Notice
For the purposes of the Data Protection Act 1998, schools are known as Data Controllers. They collect, receive and hold personal data about their pupils.
Under the Act and in accordance with GDPR, the information held by schools about their pupils must only be used for specific purposes. Schools are required to write to parents/pupils to tell them about the types of data held, why it is held and to whom it may be passed. This is referred to as a 'Privacy Notice' .