GDPR (General Data Protection Regulation) came into force on 25th May 2018. GDPR regulates the collection and usage of personal data of a data subject, ie the students, their parents and staff at the school.
The principles of the GDPR are that personal data will be:
The GDPR also requires that the school shall be responsible for, and able to demonstrate, compliance with the principles.
Click here for more information.