Rothley Church of England Primary (Academy)

"Working together to achieve value and recognise the strengths of all"




At Rothley C of E Academy we are progressing towards compliance with the new General Data Protection Regulations (GDPR) due to be implemented on 25th May 2018.


Like many schools, we have been awaiting guidance to be issued by the Independent Commissioners Office (ICO) and EU’s Article 29 Working Party. We recognise that we can't wait until all guidance has been released to implement our GDPR program, so have been pragmatic, progressing with our plan. We continue to review guidance as it becomes available and will adjust our implementation as appropriate.


We know that complete GDPR compliance can only be achieved through a collaborative and transparent approach and we also want to ensure that this is comprehensive and complete. To help and promote compliance we have appointed a Data Protection Officer.

In recent weeks, we have been working on the following:

  • Identification of a Data Controller;
  • Data mapping and Data Asset Register;
  • Embedding data privacy into all our processes;
  • Information security risk;
  • Third party risk and our data partners;
  • Reviewing our procedure in handling Data Subject Access Requests (SARs);
  • Reviewing Data Privacy Breach procedures;
  • Ongoing monitoring of systems and procedures.

Our GDPR Commitment is as follows:

  • To keep you informed as to how your data is being used;
  • To keep your data secure and confidential;
  • Not to pass on your data to any third party without your consent;
  • Only to use your data for the intended and legitimate purpose.


Consent is changing to be more explicit/transparent so at the point of data collection, the individual will need to be informed exactly how their data will be used and who it will be shared with.


Due to the GDPR we need to obtain your consent to use the email address and mobile number that we have on record, so that we can continue to communicate with you using our text and email service.


It is imperative that we have your most recent contact details


We will use these to contact you with information about, but not restricted to, school based activities. For example, letting you know that an after-school club is cancelled, inform you about school closures or activities in the school community (such as the PTFA) and other activities which may be of benefit to you or your child(ren).