Data Protection Policy.pdf

St Chad's Catholic Primary School has a Data Protection Policy that applies to all employees, including voluntary, temporary, contract, and seconded employees, who handle information on behalf of the school. The policy relates to all electronic and paper-based information and aims to ensure compliance with the Data Protection Act 1998, the General Data Protection Regulation (GDPR), and the new Data Protection Act 2018. The school will ensure that personal data is processed lawfully, fairly, and transparently, and that it is collected for specified, explicit, and legitimate purposes. The policy outlines six data protection principles, including processing personal data in a manner that ensures appropriate security, and keeping it for no longer than necessary. The school will raise awareness of data protection, offer training, create a data protection policy, and complete a personal data processing audit to comply with these principles. Individuals have rights, including the right to be informed, access, rectification, erasure, restriction of processing, data portability, and objection to profiling or automated decision-making. The school will appoint a data protection officer, register with the Information Commissioner's Office, and implement technical and organizational controls to keep personal data secure.