Privacy notices

The GDPR (General Data Protection Regulations) came into effect on 25 May 2018, replacing the Data Protection Act 1998.

It is important that you are aware of your own obligations and how to comply. Visit the Information Commissioner's Office website (opens new window) to check whether you are required to register and ensure you are up to date with data legislation.

Individuals have –

• the right to know the types of data being held
• why it is being held, and
• to whom it may be communicated

The most common way to provide this information to individuals is in a Privacy Notice. A Privacy Notice for funding should be issued to all new parents and carers to explain how the data is being used. It is not necessary to issue a notice on an annual basis as long as all parents and carers (and staff) are made aware of the notice(s) and they are readily available electronically or in paper format.

The Department of Education (DfE) has drafted template privacy notices that your provision may like to use, however, they should be reviewed, amending as necessary to reflect business need and ideally include the link to the GOV.uk webpage on how the DfE collects and shares data: www.gov.uk/guidance/data-protection-how-we-collect-and-share-research-data.