Data Protection

On Friday 25 May 2018 the General Data Protection Regulation (GDPR) came into effect. This new regulation will impact on data protection and privacy for all individuals within the EU and replaces the Data Protection Act (DPA). 

This page of our website will provide information on the actions we have taken and are working on to keep you informed.  It will also provide access to key documentation around Data Protection.


We have updated our privacy notices, in line with the new legislation, to explain what data we collect, why we collect it, how we use it and who we share it with.  You can access copies using the links below:
- Privacy notice for parents
- Privacy notice for pupils
- Privacy notice for staff applicants
- Existing privacy notice for the school workforce


As part of the new legislation we are required to appoint a Data Protection Officer.  Our DPO is:
Mr N Stott           c/o Roundhay School, All-through education from 4 to 18, Gledhow Lane, Leeds LS8 1ND

As a school we take our responsibilities as a “data controller” seriously.  Roundhay already has strong Data Protection practices and policies in place to protect all of our student, parent/carer and staff data and we are in the process of updating these in line with the new legislation.  This is an ongoing process as we continue to audit, review and revise our procedures.  Our ongoing work includes:

  • Seeking revised consent form for the use of photographs/videos and, at the secondary campus only, biometric data (used with our cashless catering system).  We will then seek to update and apply this revised consent where necessary.  Given the scale involved this will take a period of time.
  • As part of our ongoing audit we are compiling a list of third parties who process data on our behalf (as set out in the privacy notice above) which we aim to make available via this page.
  • Once the legislation is finalised we will also be revising our Data Protection Policy which will be approved by governors.
  • Our programme of staff training continues to ensure all staff are aware of their responsibilities for data protection as they relate to their role.