Data Protection

Data Protection at New Height School

At New Heights School, we take the protection of personal data seriously and are committed to handling all information in line with the Data Protection Act 2018 (DPA 2018) and the guidance provided by the Department for Education (DfE).

What is the Data Protection Act 2018?

The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR), which was introduced on 25 May 2018. It sets out the rules and principles governing how organisations, businesses, and the government use personal data. This updated legislation replaces the original Data Protection Act of 1998 and includes strict requirements on the collection, use, and storage of personal information.

How Does This Apply to Schools?

As a school, we handle a significant amount of personal data about our pupils, parents, carers, and staff. Most of the data we hold is essential for:

  • Legal Reasons: Ensuring compliance with statutory requirements.
  • Vital Interests: Protecting the safety and well-being of pupils.
  • Public Interest: Performing our role as an educational institution.

We are bound by data protection principles, which require that personal data is:

  • Used fairly, lawfully, and transparently.
  • Collected for specific, explicit purposes and not used in a way that is incompatible with those purposes.
  • Kept accurate and up to date.
  • Stored securely and retained only as long as necessary.

Privacy Notices

To ensure transparency, we have published a Privacy Notice for pupils, parents, guardians, and carers. This notice outlines:

  • The types of personal data we collect.
  • How and why we use it.
  • Your rights regarding the information we hold.

You can find the Privacy Notice under the School Information tab on our website in the GDPR section.

Data Protection Post-Brexit

Since the UK left the European Union on 1 January 2021, the EU GDPR no longer applies in the UK. Instead, the DPA 2018, incorporating elements of the UK GDPR, governs how personal data is managed. The UK now has the independence to review and update its data protection framework as necessary.

Commitment to Data Protection

We handle personal data with the utmost care and diligence, ensuring compliance with the latest advice and regulations. Our policies and procedures are regularly reviewed to reflect changes in legislation and guidance from the DfE.

If you have any concerns or questions about how your data is handled, please do not hesitate to contact us.

For further details, please refer to:

MENU