GDPR
New legislation came into place on 25th May 2018, tightening the law around how we process personal data about our pupils, staff, parents, contractors, governors and other individuals we come into contact with.
The key principles underpinning the new Data Protection Act are that personal data must be:
- Processed lawfully, fairly and in a transparent manner
- Collected for specified, explicit and legitimate purposes
- Adequate, relevant and limited to what is necessary in relation to the purposes for which the data is processed
- Accurate and kept up to date
- Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed
- Processed in a way that ensures appropriate security of personal data We need to meet these new rules and demonstrate our compliance with them.
If you feel that we have breached the principles of the Data Protection Act 2018, please contact our Data Protection Officer is REAch2, and can be contacted by email at: dataprotectionofficer@reach2.org
Data Protection Complaints
As of 19th June 2026, a new provision under Section 164A of the Data Protection Act 2018 gives individuals a direct statutory right to complain to schools about data protection matters where they believe UK GDPR or DPA 2018 has been infringed.
The key points:
- This is a separate statutory complaints route for data protection matters.
- There is a distinct difference from our general complaints process.
- All data protection complaints will be handled by Claire Lockyer, Data Protection Officer and should be forwarded to: dataprotectionofficer@reach2.org
- Schools are not required to investigate or respond to any data protection related complaints which will be managed by our Data Protection Officer.
You can record a Data Protection complaint using the Trust's Data Protection Complaints Form here:
-
Alternatively, you can email your Data Protection Complaint by email to:
dataprotectionofficer@reach2.org -
We are required to acknowledge all Data Protection Complaints within 30 days of receipt and respond without undue delay.