Return to Policies


New  General Data Protection Regulations (GDPR) came into force on 25th May 2018.

GDPR will replace the Data Protection Act 1998 and is designed to strengthen the safety and security of all data held within an organisation, and make sure processing and storage procedures are consistent.

It is important that you understand your rights under the GDPR; you have the right to:

  • Be informed about how we use your personal data.
  • Request access to the personal data that the school holds.
  • Request that your personal data is amended if it is inaccurate or incomplete.
  • Request that your personal data is erased where there is no compelling reason for its continued processing.
  • Request that the processing of your data is restricted.
  • Object to your personal data being processed.
Data Protection Officer Name: GDPR for Schools, Derbyshire County Council
DPO Email:
DPO Phone: 01629 532888
DPO Address: Room 396, North Block, County Hall, Smedley Street, Matlock, Derbyshire, DE4 3AG

GDPR & DATA Protection Policy 2018

Child friendly GDPR Privacy Notice

Data Breach Procedure

Derbyshire County Councils summary guidelines of record retention periods for schools

Parents GDPR Privacy Notice

Parent Subject Access Request form

Procedure for Access to Personal Information

Staff GDPR Privacy Notice

Staff Subject Access Request form

Derbyshire County Councils Image use Guidance

Digital Continuity Statement


Image Use Policy

Records Management Policy (Data Retention)