The law changed when the General Data Protection Regulations (GDPR) came into effect on 25th May 2018. Schools have a legal duty to comply with the GDPR. GDPR brings a new responsibility to inform parents and stakeholders about how we are using pupils’ data and who it is being used by.
A great deal of the processing of personal data undertaken by schools will fall under a specific legal basis, ‘in the public interest’. As it is in the public interest to operate schools successfully, it will mean that specific consent will not be needed in the majority of cases in schools. For further information please check our GDPR on our website.
