Data Protection Act 2018 & GDPR

What is the Data Protection Act 2018 & GDPR?

From May 25th 2018, the UK has new Data Protection laws.  The Data Protection Act 2018 is the UK version of new EU regulations called the General Data Protection Regulations (GDPR!).  The principles of the changes to data protection legislation are in UK law and so they will apply after the UK leaves the EU.

This will affect how schools manage the personal data of staff, parents, pupils and other people and organisations that schools collect data about.  It affects what data we can ask you to give us, how we store it, how we protect it, when we have to delete it, how quickly we have to respond if someone wants to see all of the personal data that we store about them, the circumstances under which we are allowed to share it and telling you if we do share your data.  It makes sure that personal data that goes through a new technology is as well protected as data in old technologies or as well as the data stored as printed sheets in a filing cabinet.  It introduces tougher fines for non-compliance and breaches and it gives people the right to choose some aspects of what organisations can do with their data.

Data Protection Policy

The College’s latest Data Protection Policy can be accessed directly from the policies page of the website – here

More Information

To find out more about the new law from the website of the Information Commissioners Office (ICO) – click here

Privacy Notices

A Privacy Notice is a generalised statement of what data we collect and hold about you.  It also contains the legal reasons why we are allowed to hold that data and the reasons why we have to share some of that data. In addition, if you have given consent for photography / digital images, it tells you what these are used for and what your legal rights are;

  • The latest Easy Read Data Protection Privacy Notice for Parents – click here
  • The latest Privacy Notice for Pupils – click here
  • The latest Privacy Notice for Parents about both their own and their children’s data – click here
  • The latest Privacy Notice for College Staff – click here
  • The latest Privacy Notice for Governors – click here
  • The latest Privacy Notice for Alumni – click here
  • The latest Privacy Notice for Lettings and Other Customers – click here
  • The latest Privacy Notice for Contractors and Other Suppliers – click here
  • The latest Privacy Notice for Ex-Workforce – click here
  • The latest Privacy Notice for Job Applicants – click here
  • The latest Privacy Notice for Trainee Teachers – click here
  • The latest Privacy Notice for Volunteers and Other Adult Helpers – click here
  • The latest Privacy Notice for Visitors – click here

Data Retention Schedule

To see the data retention periods for personal data, please click here.

Individual Rights Requests

To make an individual rights request, please complete and return the form – here.
Please send your completed form to dataprotection@heathfieldcc.co.uk

Subject Access Requests

To make a subject Access Request, please complete and return the form – here.
Please send your completed form to dataprotection@heathfieldcc.co.uk