What is Data Protection and UK GDPR?

At St Mary's, we are committed to treating all members of our community with dignity, respect and care. An important part of this commitment is ensuring that personal information is handled safely, securely and lawfully.

The UK General Data Protection Regulation (UK GDPR), together with the Data Protection Act 2018, sets out how organisations, including schools, must collect, use, store and share personal information. These laws give individuals greater control over their personal data and place clear responsibilities on organisations to be transparent, accountable and secure in the way they process information.

For schools, this means ensuring that information about pupils, families, staff, governors, volunteers and other members of our community is managed responsibly and only used for legitimate educational and operational purposes.

Why is Data Protection Important?

The way people communicate, learn and share information has changed significantly over recent decades. Schools now use a wide range of digital systems, online learning platforms, websites, apps and electronic communications to support teaching, learning and administration.

As technology continues to evolve, it is essential that personal information is protected from misuse, loss or unauthorised access. Effective data protection helps to:

• Safeguard the privacy of pupils, families and staff.
• Build trust within our school community.
• Ensure information is accurate, secure and only used when necessary.
• Meet our legal and ethical responsibilities.
• Support a culture of respect, integrity and accountability.

The Information Commissioner's Office (ICO) is the UK's independent authority responsible for upholding information rights. The ICO provides guidance, monitors compliance and has powers to investigate concerns and take action where organisations fail to meet their obligations.

What Does This Mean for St Mary's?

As a school, St Mary's processes a significant amount of personal information in order to fulfil its educational responsibilities and provide the best possible support for pupils and families. This includes information relating to pupils, parents and carers, staff, governors, volunteers, contractors, visitors and other members of the wider school community.

Everyone at St Mary's has a responsibility to protect personal information and to ensure that it is handled confidentially, securely and in accordance with data protection legislation. By doing so, we demonstrate our commitment to respect, responsibility and care for one another, reflecting the values that underpin our school community.