The General Data Protection Regulation, which was implemented on 25 May 2018,m poses significant challenges for schools, whether it be from a management or financial perspective. The GDPR has now been incorporated into the Data Protection Act 2018 (DPA).
Under the DPA, the rights of data subjects have been strengthened, meaning that organisations such as schools are now having to, or preparing to, deal with additional responsibilities in order to facilitate such rights.
Given that the information held about pupils, teachers and other staff members can often be very sensitive in nature, schools will need to carefully review the way personal data is processed and stored going forward.
To read the full article, click here to go to Education Journal. Please be aware that you have to be a subscriber to access this article.