Data Protection

All schools must comply with the UK GDPR and data protection Act 2018 to ensure that personal data for pupils, staff, parents and visitors is processed lawfully, securely and transparently. The Data (Use and Access) Act 2025 updates these laws to offer clearer rules on Subject Access requests (SARs) and strengthening protection for children’s online privacy.

Please use the NPAT Data Protection link to the left for more information.