Data Protection, SAR and GDPR Compliance
It is common for schools to receive Subject Access Requests (SARs) from parents, staff and pupils. The Data Protection Act 1998 provides living individuals with the right to request disclosure of their personal data which is being processed by the school. This right will be preserved under the GDPR. While the purpose of this right is to check the accuracy of personal data, the motivation behind such requests may vary depending on the circumstances.
SARs can generate a substantial administrative burden but we will support you so that you are not distracted from the daily business of running the School. We will guide you through the School’s response to such requests, ensuring that it complies with its statutory duties and does not breach the data rights of any third party in the process. We will help you identify which data fall within the scope of the SAR, where statutory exemptions apply and in presenting the disclosure in accordance with essential statutory requirements.