Skip to content
  • Data Protection & Freedom of Information

    Data Protection Officer

    The Trust Data Protection Officer is an external, independent organisation. We are moving to a different organisation to fulfil the role. Please bear with us while we update our policies and websites to reflect the change

    Our Data Protection Officer is:

    Data Protection Officer: Data Protection Education
    DPO email: dpo@dataprotection.education
    DPO telephone:  0800 0862018
    DPO address:  41 High Street, Royston, Hertfordshire, SG8 9AW

    We are registered with the ICO and you can find a copy of our registration certificate below:

    Data Protection Policies

    You will find below our data protection related  policies and procedures.

    Our Data Protection policy explains how we ensure that personal information (also known as personal data, including special category data (data relating to health, race, sexuality, criminal offences, policy opinions and union memberships) is dealt with appropriately and securely, in accordance with the Data Protection Act 2018 and the Data Use and Access Act 2025. Special category data is personal data that is more sensitive in nature and for which there are additional requirements under data protection regulations. The policy below sets out and explains our procedures for securing compliance.

    All Data Subjects, including parents, pupils and staff, have rights of access to their personal data. A request to access this personal data is known as a Subject Access Request or SAR.  Our Subject Access Request procedure explains how we ensure that such requests are properly received and responded to. 

    Our Data Rights Complaints policy explains the formal process by which individuals can raise concerns regarding the handling of their personal data or the exercise of their Data Rights by the Trust and its schools. 

    Our Data Breach procedure explains what a data breach is and our response to data breaches.

    Our Record Retention policy sets out how long we retain information. 

    Privacy notices explain the information we process for our parents, pupils and staff. You can find those on our schools' websites in the data protection section. 

    We also have a privacy notice for governance volunteers and a generic workforce privacy notice for job applicants and new contracts. You can find both of these below:

    Some of our schools have CCTV. Please find below our CCTV policy which explains our approach to CCTV.  

    Freedom of Information

    Requests for information can also be made under the Freedom of Information Act. Our Freedom of Information publication scheme explains what information is available on the Trust/school websites or available on request.  Our Freedom of Information Request policy outlines how we approach our obligations under the Freedom of Information Act to create a climate of openness and dialogue. 

    Using AI to help draft information requests?

    AI tools can be helpful, but they can also introduce errors or create overly complex requests that increase the burden on public bodies and cost to the taxpayer.

    When using AI to help draft an information request, please make sure the final wording has been checked and reflects your actual information needs.

    Before you submit a request or secondary correspondence, please check that:

    • You are only asking for the information you are genuinely looking forAI tools sometimes generate broad or excessive wording that goes beyond the information you actually want or need;

    • The request is clear, concise and focusedShort, straightforward requests are easier for us to process and usually lead to quicker, more accurate responses;
    • There are no obvious factual inaccuraciesAI can misrepresent legislation or misstate what organisations do. Please review the text of your request carefully and don’t assume AI is right. If it has referred to something you don’t understand, check what it is; and
    • The tone is appropriateAI-generated content can sometimes sound abrupt, or otherwise inappropriate. Please check the tone before sending.

    Why does this matter?

    We are seeing an increase in requests and secondary correspondence that appear to have been drafted by generative AI. These can require additional clarification because of inaccuracies or unnecessary complexity. This creates delays for both requesters and our teams.

    Need guidance?

    You can find advice on making effective information requests on the Information Commissioner’s Office website.

    tent

    Accordion content