GDPR

Our world is becoming increasingly dependent on digital data. Many aspects of our lives can now be processed online (banking, shopping or online subscriptions for example) using a variety of digital tools and apps. Many of our records in school are now also computer based. Companies and organisations now have to be mindful of the safety of collecting, using and sharing information online.

With this in mind GDPR was launched on 25th May 2018. It replaced the UK Data Protection Act (1998). GDPR stands for the EU General Data Protection Regulation. It governs how schools collect, use and share information. It provides individuals with rights and control over how their information is handled by organisations, including schools.

At Brookside Primary School we are taking steps to review and update our policies and processes around handling information. The Trust has a dedicated DPO (Data Protection Office) who will monitor these changes. Please visit the OAK Academies website for further information.

If you would like to find out more about the GDPR and your rights, please visit the UK’s data protection regulator, the Information Commissioner’s Office at www.ico.org.uk

Should you have any queries regarding the GDPR and our school, please email the school office.

Click Here to see our Trust GDPR documents including a guide to your data rights and a subject access request form:

Freedom of Information

Please contact Dr Danielle Benyon-Payne, Governance Manager: admin@oaktrust.org

Where FOI requests relate to our schools, please note that during school closures / school holidays a response can not be provided until the school reopens.

As an organisation we collect and process data about individuals. We explain what information we collect, and why in our privacy notices.

Any individual, or person with parental responsibility, or young person with sufficient capacity to make a request is entitled to ask what information is held. Copies of the information shall also be made available on request. A form to complete is available.

To ensure that requests are dealt with in an effective and timely manner we may seek to clarify the terms of a request.

Exemptions to a SAR exist and may include:

  • education, health, social work records
  • examination marks and scripts
  • safeguarding records
  • special educational needs
  • parental records and reports
  • legal advice and proceedings
  • adoption and court records and/or reports
  • regulatory activity and official requests e.g. DfE statistical information
  • national security, crime and taxation
  • journalism, literature and art
  • research history, and statistics
  • confidential references

All data subjects have the right to know:

  • What information is held?
  • Who holds it?
  • Why is it held?
  • What are the retention periods?
  • that each data subject has rights. Consent can be withdrawn at any time (to somethings)
  • a right to request rectification, erasure or to limit or stop processing
  • a right to complain

Much of this will be contained within the privacy notices on the website.

The information will be provided in an electronic format, usually within one calendar month of the request. However, in some circumstances, for example the school is closed for holidays, this may be extended by up to another calendar month.

Following delivery of the information the requester has the right to ask for a review or use the complaint process if they feel that information has not been provided.