Privacy Notices, the Data Protection Act (DPA) and the General Data Protection Regulation (GDPR)

Schools hold and process a variety of information about their students which is necessary to support their learning. From time to time, schools are required by law to pass on some of this information to other educational and healthcare organisations. In some cases, it is also necessary for student data to be shared with third parties. In these circumstances data is only shared in order to perform functions on our behalf and we do not share information about our students with anyone without consent unless the law or our policies allow us to do so.

Under the Data Protection Act (DPA) and the General Data Protection Regulation (GDPR) the School is required to write to parents, carers and students to tell them about the types of data held, why it is held and to whom it may be passed. This is referred to as a Privacy Notice and one has been included for you with this letter.

Please take time to read through the Privacy Notice and to also share it with your child(ren).

For students of 13 years and over the School is legally required to pass on certain information to the provider of youth support services in the area. This is the local authority support service for young people aged 13 to 19 in England. A parent or carer can request, on the enclosed admission form, that no information beyond the name and address for student and parent/carer, and the student’s date of birth, be passed to the support service. This right is transferred to the child/student once he/she reaches the age of 16. Therefore, please also share this information with your child.

If you have any queries regarding the Privacy Notice please do not hesitate to contact the School’s Data Protection Officer at the School at dpo@kes.sheffield.sch.uk.