GDPR
The UK General Data Protection Regulation came into force on 25 May 2018, replacing the Data Protection Act 1998, and works alongside the Data Protection Act 2018. It governs how organisations, including schools, must handle personal data responsibly and gives individuals stronger rights over their own information. Our Data Protection Officer is Staffordshire County Council.
Your rights under UK GDPR
1Be informed
You have the right to know how your data is collected and used — that's what our privacy notices set out.
2Access your data
You can ask for a copy of the personal data we hold about you or your child via a Subject Access Request.
3Rectification
You can ask us to correct data that is inaccurate or incomplete.
4Erasure
Sometimes known as the "right to be forgotten", though schools must balance this against statutory retention duties.
5Restrict processing
You can ask us to limit how your data is used while a concern is looked into.
6Object
You can object to certain types of processing, including direct marketing.
Our data protection principles
Personal data must be: used lawfully, fairly and transparently · collected for specified, explicit purposes · adequate, relevant and limited to what's necessary · accurate and kept up to date · kept no longer than necessary · and handled securely, protecting against unauthorised or unlawful processing, loss, damage or destruction.
Who to contact
Tracey Thorley
Data Protection Officer
Information Governance Unit, Staffordshire County Council
1 Staffordshire Place, Stafford, ST16 2DH
Information Commissioner's Office
Independent regulator
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
The UK General Data Protection Regulation came into force on 25 May 2018, replacing the Data Protection Act 1998, and works alongside the Data Protection Act 2018. It governs how organisations, including schools, must handle personal data responsibly and gives individuals stronger rights over their own information. Our Data Protection Officer is Staffordshire County Council.
Your rights under UK GDPR
1Be informed
You have the right to know how your data is collected and used — that's what our privacy notices set out.
2Access your data
You can ask for a copy of the personal data we hold about you or your child via a Subject Access Request.
3Rectification
You can ask us to correct data that is inaccurate or incomplete.
4Erasure
Sometimes known as the "right to be forgotten", though schools must balance this against statutory retention duties.
5Restrict processing
You can ask us to limit how your data is used while a concern is looked into.
6Object
You can object to certain types of processing, including direct marketing.
Our data protection principles
Personal data must be: used lawfully, fairly and transparently · collected for specified, explicit purposes · adequate, relevant and limited to what's necessary · accurate and kept up to date · kept no longer than necessary · and handled securely, protecting against unauthorised or unlawful processing, loss, damage or destruction.
Who to contact
Tracey Thorley
Data Protection Officer
Information Governance Unit, Staffordshire County Council
1 Staffordshire Place, Stafford, ST16 2DH
Information Commissioner's Office
Independent regulator
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF