In anticipation of the introduction of the General Data Protection Regulation (GDPR) in May 2018, we have been reviewing our procedures to ensure the collection, processing and retention of pupils’ personal data is compliant with the new Regulation and in line with the principle of data minimisation.

Schools maintained by Surrey County Council are classified as a “data controller” under GDPR.

Updated privacy notices detailing how we store and process personal data are available on our website.