General Data Protection Regulation (GDPR)

What is the GDPR?

The GDPR is a piece of EU-wide legislation that sets out the rules on two things:

  • How organisations, including schools, will process people’s personal data and keep it safe
  • The legal rights people have over their own data

It has applied to all schools since 25 May 2018, and the UK government has confirmed it will apply even after the UK leaves the EU.

The changes are intended to protect sensitive or confidential information about people, including school staff and pupils.

GDPR