Data Protection and Information Sharing

Mount Carmel school aims to ensure that all personal data collected about staff, pupils, parents, governors, visitors and other individuals is collected, stored and processed in accordance with the general data protection regulation (GDPR) and the expected provisions of the data protection act 2018 as set out in the data protection bill.

Data Breach

The GDPR introduces a duty on all organisations to report certain types of personal data breaches to the relevant supervisory authority. This must be done within 72 hours of becoming aware of the breach and the organisation must take steps to reduce the impact of any data breach particularly where a breach is likely to result in a high risk of adversely affecting individuals’ rights and freedoms. For further information please see the Data Breach Policy link below. All data breaches should be reported immediately using the template form below