The General Data Protection Regulation (GDPR) is a piece of EU-wide legislation which will determine how people’s personal data is processed and kept safe, and the legal rights individuals have in relation to their own data. In the UK it will be enacted as the Data Protection Act 2018 and will be enforced from 25th May 2018.
The legislation will apply even after the UK leaves the EU.
‘Personal data’ means information that can identify a living individual.
Read our Privacy Notice which explains how we use Pupil information.