Return to Policies


New  General Data Protection Regulations (GDPR) came into force on 25th May 2018.

GDPR will replace the Data Protection Act 1998 and is designed to strengthen the safety and security of all data held within an organisation, and make sure processing and storage procedures are consistent.

It is important that you understand your rights under the GDPR; you have the right to:

  • Be informed about how we use your personal data.
  • Request access to the personal data that the school holds.
  • Request that your personal data is amended if it is inaccurate or incomplete.
  • Request that your personal data is erased where there is no compelling reason for its continued processing.
  • Request that the processing of your data is restricted.
  • Object to your personal data being processed.
Data Protection Officer Name: GDPR for Schools, Derbyshire County Council
DPO Email:
DPO Phone: 01629 532888
DPO Address: Room 396, North Block, County Hall, Smedley Street, Matlock, Derbyshire, DE4 3AG

GDPR & DATA Protection Policy 2019

Child friendly GDPR Privacy Notice

Data Breach Procedure 2019

Derbyshire County Councils summary guidelines of record retention periods for schools

Derbyshire County Councils Image use Guidance

Digital Continuity Statement


Image Use Policy

Pupil Privacy Notice

Procedure for Access to Personal Information

Records Management Policy (Data Retention)

Workforce Privacy Notice

Subject Access Request form (SAR)