Menu
Home Page

GDPR: Privacy Notices

GDPR privacy notice for pupils and their families

 

Data Protection Act 1998: How we use pupil information

General Data Protection Regulations 2018 (GDPR)

What information do we collect and why?

 

Abbots Hall Primary Academy collect and hold personal information relating to our pupils and may also receive information about them from their previous school, local authority and/or the Department for Education (DfE).

 

We collect and use personal data in order to meet legal requirements and legitimate interests set out in the GDPR and UK law, including those in relation to the following:  

  • Article 6 and Article 9 of the GDPR
  • Education Act 1996  
  • Regulation 5 of The Education (Information About Individual Pupils) (England)

Regulations 2013

 

This information will include;

  • their contact details
  • national curriculum assessment results,
  • attendance information,
  • pastoral information,
  • any exclusion information,
  • where they go after they leave us,
  • personal characteristics such as their ethnic group,
  • any special educational needs,
  • relevant medical information,
  • CCTV systems to monitor and collect visual images for security and the prevention of crime.

 

Why we collect and use this information

 

We use this personal data to;

  • safeguard pupils
  • support our pupils’ learning
  • monitor and report on their progress
  • provide appropriate pastoral care; and
  • assess the quality of our service
  • to comply with the law regarding data

 

Collecting pupil information

 

Whilst the majority of pupil information you provide to us is mandatory, some of it is provided to us on a voluntary basis. In order to comply with the General Data Protection Regulation, we will inform you whether you are required to provide certain pupil information to us or if you have a choice in this.

Statutory Data collection requirements:

We are required, by law, to pass certain information about our pupils to our local authority (LA) and the Department for Education (DfE).

 

We routinely share pupil information with:

  • schools that the pupil’s attend after leaving us
  • our local authority
  • the Department for Education (DfE)

 

We hold personal pupil data for the duration of the time children are with us and we hold assessment data for a further 7 years. We will not give information about our pupils to anyone without your consent unless the law and our policies allow us to do so.

 

The National Pupil Database (NDP)

 

The NDP is owned and managed by the DfE and contains information about pupils in schools in England. It provides invaluable evidence on educational performance to inform independent research, as well as studies commissioned by the Department. It is held in electronic format for statistical purposes. This information is securely collected from a range of sources including schools, local authorities and awarding bodies.

 

We are required by law, to provide information about our pupils to the DfE as part of statutory data collections such as the school census and early years’ census. Some of this information is then stored in the NPD. The law that allows this is the Education (Information About Individual Pupils) (England) Regulations 2013. To find out more about the NPD, go to https://www.gov.uk/government/publications/national-pupil-database-user-guide-and-supporting-information.

 

Personal Data shared by the DfE

 

DfE may also share pupil level personal data that we supply to them, with third parties. This will only take place where legislation allows it to do so and it is in compliance with the Data Protection Act 1998.

Decisions on whether DfE releases this personal data to third parties are subject to a robust approval process and are based on a detailed assessment of who is requesting the data, the purpose for which it is required, the level and sensitivity of data requested and the arrangements in place to store and handle the data. To be granted access to pupil level data, requestors must comply with strict terms and conditions covering the confidentiality and handling of data, security arrangements and retention and use of the data.

 

For more information on how this sharing process works, please visit: https://www.gov.uk/guidance/national-pupil-database-apply-for-a-data-extract

For information on which third party organisations (and for which project) pupil level data has been provided to, please visit: https://www.gov.uk/government/publications/national-pupil-database-requests-received

If you need more information about how our local authority and/or DfE collect and use your information, please visit:

 

Requesting access to your personal data

 

Under data protection legislation, parents and pupils have the right to request access to information about them that we hold. To make a request for your personal information, or be given access to your child’s educational record, please contact us via the school office.

 

You also have the right to:

  • object to processing of personal data that is likely to cause, or is causing, damage or distress
  • prevent processing for the purpose of direct marketing
  • object to decisions being taken by automated means
  • in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
  • claim compensation for damages caused by a breach of the Data Protection regulations

 

If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the Information Commissioner’s Office at https://ico.org.uk/concerns/

Top