On the 25th May 2018, the General Data Protection Regulations (GDPR) came into force in the UK. These are new data protection regulations that build upon the Data Protection Act of 1998.
The GDPR require public authorities and businesses to identify the lawful basis for storing personal data, audit information we already hold and take a ‘data protection by design and default’ approach to personal data.
We take data protection very seriously at The Giles Nursery and Infants’ School. In line with GDPR requirements, we have appointed a Data Protection Officer, Mr John Stevens who is also one of our Governors, to oversee our approach to data management and protection.
In order to comply with the new regulations, we have reviewed our current policies and practices. We have already updated our privacy notices in line with the new requirements. These can be found by scrolling down and clicking on the link below.
As part of this compliance process, we have also updated the Image Consent Forms we have received from parents and pupils. The new regulations are clear that consent must be up-to-date and clearly recorded. From now on, lack of response cannot be interpreted as implied consent. We therefore ask you to return these promptly.
To learn more about the General Data Protection Regulation, please visit the Information Commissioner’s Office website on http://ico.org.uk
Subject Access Requests
For full details about subject access requests please see our school policy below.
As a matter of course, requests submitted prior to any holiday period will responded to within the required timescales. However, the school is conscious of the fact the ability to service such requests may be made more complex by staff absence.
Should a holiday close down period severely affect the school’s ability to facilitate the production of the required information, the requester will be notified and the school may extend the period of compliance by a further two months. As school post is held over during holiday periods until staff return to the premises, requesters should send their requests by email to the DPO firstname.lastname@example.org to enable us to comply with the request within the necessary time-frame.
Requests made during school closures, principally the summer holiday period, should be made by email to the DPO and will not be actioned until staff return and identification of the requester has been made.