We would like to briefly inform parents of updates regarding data protection.
GDPR comes into effect 25 May 2018
Main differences from current Data Protection Act:
§Under the Data Protection Act 1998, you were deemed compliant until there was a breach
§Under the GDPR, you must be able to evidence you are compliant from 25 May 2018
§Personal data is re-defined to include IT advances such as IP addresses and retina scanning, for example
§Greater emphasis on consent; you are no longer able to assume consent
•§Greater information governance and security
§Significantly increased fines for data breaches
Therefore we are reviewing our processes, policies, and procedures regarding data, and parents are welcome to view our updated Policy held in the nursery office.