The Data Protection Act 2018
The King's School collects, holds and uses a great deal of information about individuals, particularly students and adults connected with the school. Under the Data Protection Act 2018 (General Data Protection Regulation), data about living individuals is known as personal data. The regulation puts in place numerous safeguards for the use of data about individuals.
Under the Data Protection Act, the data protection principles set out the main responsibilities for organisations: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/principles/
The King's School has a statutory duty to comply with the requirements of the Data Protection Act as it collects data about students and adults associated with the school for school business. The school is also required to produce a privacy notice explaining how information is collected and processed.
Information about your rights under the Data Protection Act can be found on the Information Commissioner’s website.
All of the information we hold on individuals follows the six key principles:
- Fair, lawful and transparent
- Collected for specified, explicit and legitimate purposes
- Adequate, relevant and limited to what is necessary
- Accurate, and where necessary, kept up to date
- Kept in a form which permits identification for no longer than is necessary
- Processed in a manner that ensures appropriate security