If your school is in a MAT, your trust is responsible for privacy notices
This is because your academy trust is the data controller. Under the UK GDPR, the data controller is required to provide privacy notices.
This means you should use your trust's privacy notices and don't need to adapt our model notices for yourself.
Download our model privacy notices
You're required to provide certain information to data subjects, typically through a privacy notice. Some schools refer to this document as a 'fair processing notice' instead.
The models below cover the groups of people you're most likely to hold personal data for. If you hold data on any other groups, choose the most applicable notice and adapt it accordingly.
The DfE's guidance and model notices for schools and local authorities The Information Commission's Office (ICO) guide to the UK GDPR Advice from Forbes Solicitors and our associate