Statement of intent

St Stephens CE Primary school is required to keep and process certain information about its staff members and pupils in accordance with its legal obligations under the GDPR.

The school may, from time to time, be required to share personal information about its staff or pupils with other organisations, mainly the LA, other schools and educational bodies, and potentially children’s services.

This policy is in place to ensure all staff and governors are aware of their responsibilities and outlines how the school complies with the following core principles of the GDPR.

Organisational methods for keeping data secure are imperative, and St Stephen’s CE Primary school believes that it is good practice to keep clear practical policies, backed up by written procedures.