CONSENT 

Consent and the right to withdraw

As a school we will seek consent from staff, volunteers, young people, parents and carers to collect and process their data. We will be clear about our reasons for requesting the data and how we will use it. There are contractual, statutory and regulatory occasions when consent is not required.  However, in most cases data will only be processed if explicit consent has been obtained.

Consent is defined by the GDPR as “any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her”. We may seek consent from young people also, and this will be dependent on the child and the reason for processing.

On the school website we have ‘Privacy Notices’ that explain how data is collected and used. It is important to read these notices as it explains how data is used in detail. Obtaining clear consent and ensuring that the consent remains in place is important for school. We also want to ensure the accuracy of that information.

 

For Pupils and Parents/Carers

On arrival at school you will be asked to complete an Admission Form giving next of kin details, emergency contact and other essential information. We will also ask you to give consent to use the information for other in school purposes, as set out on the data collection form. We review the contact and consent form on an annual basis.

It is important to inform school if details or your decision about consent changes.  A form is available. (Withdrawal of Consent Form).

 

Pupil consent procedure

Where processing relates to a child under 16 years old, school will obtain the consent from a person who has parental responsibility for the child.  Pupil’s may be asked to give consent or to be consulted about how their data is obtained, shared and used in certain situations.

 

Withdrawal of Consent

Consent can be withdrawn, subject to contractual, statutory or regulatory constraints. Where more than one person has the ability to provide or withdraw consent the school will consider each situation on the merits and within the principles of GDPR and also child welfare, protection and safeguarding principles.

​

Please complete the appropriate form:

Pupil Consent Withdrawal Form

Adult Consent Withdrawal Form

​

Data Portability Statement

The GDPR requires an organisation that stores data to enable transfer of that data from one organisation to another. In schools, pupil data is transferred using the Common Transfer File (CTF) which is a DfE standard process. This is outside the scope of data portability in the GDPR.

Employee data will be shared to enable new starters and leavers to take up new roles as easily as possible.

When new data is provided to school it will then be administered and processed within the terms of the Data Protection and any other relevant policy.

​

​