What is GDPR?

The GDPR applied in all EU member states from 25 May 2018.  This affects how schools manage personal data and how this is protected and shared. The EU GDPR was incorporated into UK legislation as the 'UK GDPR' by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 in January 2021. 

The EU’s General Data Protection Regulation (GDPR) is the result of four years of work by the EU to bring data protection legislation into line with new previously unforeseen ways that data is now used.

Previously the UK relied on the Data Protection Act 1998, which was enacted following the 1995 EU Data Protection Directive, but this has been superseded by the new legislation.  It introduces tougher fines for non-compliance and breaches, and gives people more say over what companies can do with their data.  It also makes data protection rules more or less identical throughout the EU.

We have updated Privacy Notices, Policies and Consent Forms to make sure we are compliant with the new GDPR. These can be found here:

Statement of intent

Buckden Church of England Academy is committed to maintaining the confidentiality of its information and ensuring that all records within our school are accessible to individuals. In line with the requirements of the GDPR, the school also has a responsibility to ensure that all records are only kept for as long as is necessary to fulfil the purpose(s) for which they were intended.

The school has created this policy to outline how records are stored, accessed, monitored, retained and disposed of in order to meet the school's statutory requirements of the UK General Data Protection Regulation (UK GDPR) – the EU GDPR was incorporated into UK legislation, with some amendments, by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 and the Data Protection Act 2018 (DPA 2018).It is based on guidance published by the Information Commissioner’s Office (ICO) on the GDPR.

Data protection plans and policies

Check regularly on this section to see what is new.

Follow the link for more information about the new GDPR regulations from the ICO website.

If you wish you contact our Data Protection Officer, you can do so by emailing office@bpa.act-academytrust.org