GDPR

The aim of the GDPR is to strengthen and standardise the safety and security of all data held within an organisation, reflecting changes in technology and the ways in which organisations collect information about ‘individuals’ (data subjects). The regulation provides certain rights which data controllers and data processors must respect. Compliance with these principles has required us to review what information we hold, where it is stored and how long we retain this information.

See www.ico.org.uk for further information on GDPR.

The GDPR requires schools to keep personal data safe and to have appropriate systems, policies and procedures in place to enable them to comply with their data protection responsibilities.

Please refer to the school’s Data Protection Policy

The school has also updated its Privacy Notices in line with the new laws on data protection.

Staff Privacy Notice

Learner Privacy Notice

Parents/Carers Privacy Notice

Requests for Information

The school will follow legislative guidance when dealing with Data Subject Access Requests.

Please refer to Information Commissioner’s Office guidance on Accessing pupils’ information.

As an academy a learner or parent/carer (person with parental responsibility/ legal guardian) does not have a legal right to access a child’s educational record. It will be up to the school to decide whether to grant such access.

Please refer to the Information Commissioner’s Office Subject access Request Information for further information.

If you wish to request information we hold about you, please complete the Data Subject Access Form found on the link below and send it to the DPO at shart286.310@harrowhigh.com or post to Shana Hart, Executive Assistant, Harrow High School, Gayton Road, Harrow, Middlesex HA1 2JG

Any request in writing will be considered from the individual (Data Subject) as a valid request, whatever the format as long as it contains the relevant information to enable us to deal with your request.

If you are requesting information on behalf of someone else you must complete the Data Subject Access Request Form and provide written evidence that you have the Data Subject’s authority to ask for the information on their behalf, e.g. signature on the Data Subject Access Form, a letter written by them, evidence of Power of Attorney, etc.

Please complete the appropriate request form and send it to shart286.310@harrowhigh.com.

How do you provide your identity

If you are not known to the school, we may ask to see proof of your identity. The following forms of identity will be accepted as proof of identity:-

• A copy of your passport
• A copy of your driving licence
• A copy of your Bank, building society or credit card statement in the Data Subject’s name for the last quarter
• A copy of your Council Tax bill

The school will follow guidance within current Data Protection legislation in relation to charges for information.

See www.ico.org.uk for further information.

Please contact the school to tell them what is incorrect and ask for it to be corrected. You can also appeal to the Information Commissioner if the school does not correct the information.

Making a complaint

If you are unhappy with the way your request for information has been dealt with or you think your data has been misused or not held securely, please contact the Data Protection Officer at shart286.310@harrowhigh.com.

If you are unhappy with the outcome of your complaint, you can escalate your complaint to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

ICO helpline
Telephone: 0303 123 1113
https://ico.org.uk/concerns/