25^th May 2018

Dear Parent/Carer,

Today (25th May 2018), the General Data Protection Regulations (GDPR) comes into force in the UK. These are new data protection regulations build upon the Data Protection Act of 1998.

1. GDPR require public authorities and businesses to identify the lawful basis for storing personal data, audit information we already hold and take a ‘data protection by design and default’ approach to personal data.

1. take data protection very seriously at Galley Hill Primary School and Nursery School. In line with GDPR requirements, we have appointed a Data Protection Officer, Mrs Carole Connelly, to oversee our approach to data management and protection. Her email address is carole@schoolDPOservice.com should you need to contact her at all.

In order to ensure that we comply with the new regulations, we are reviewing our current policies and practices. We are also updating our privacy notices in line with the new requirements and these will soon be available on our school website.

As part of this compliance process, we are also seeking to update the consent forms we have received from parents and these will be sent out again after half term. The new regulations are clear that consent must be up-to-date and clearly recorded. From now on, lack of response cannot be interpreted as implied consent. We therefore ask that you return these to us promptly.

To learn more about the General Data Protection Regulation, please visit the Information Commissioner’s Office website on http://ico.org.uk

Yours sincerely

Mrs E. Birch

Headteacher