DATA PROTECTION ACT 2018 (DPA 2018)
In order to provide effective care that can respond to the needs of all children, systems are used that improve and standardize communication between nursery providers and the County Council. Much of this data is held on computer systems and is subject to the Data Protection Act. The Data Protection Act says that information must only be used for the purpose for which it is collected. In the case of each child, the information will only be used by staff to help the child’s progress, by the DfE and educational professionals. Parents may request to know what information is being held in relation to their child by writing to the Manager. Further information regarding Data Protection within the County Council can be obtained from the Northumberland County Council (NCC) website http://www.northumberland.gov.uk/About/Contact/Information.aspx.
The Eight DPA Principles
There are eight principles of good information handling outlined in the act that state that data must be:
· Fairly and lawfully processed
· Processed for limited purposes
· Adequate, relevant and not excessive
· Not kept for longer than is necessary
· Processed in line with your rights
· Not transferred to other countries without adequate protection
General Data Protection Regulations (GDPR)
The GDPR forms part of the data protection regime in the UK, together with the new Data Protection Act 2018 (DPA 2018). The main provisions of the Data Protection Act like the GDPR came into force on 25 May 2018. The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) came into force on 25 May 2018 in order to strengthen and unify data protection for all individuals within the European Union. It has replaced the Data Protection Act 1998 to ensure that all data held within our school is processed, stored and safeguarded in accordance with this new legislation. Any data breach, under the new Regulations, which is likely to cause personal damage e.g., identity theft, will be reported to the ICO (Information Commissoner's Office) within 72 hours from notification.*
The Data Protection Officer (DPO) for Explorers is: Louise Jefferson
Explorers subscribes annually to the ICO (Information Commissioner's Office). Information about your rights under GDPR can be found on the Information Commissioner’s website.