The Academy will seek consent from staff, volunteers, pupils, parents and carers to collect and process their data. It will be clear about the reasons for requesting the data and how it will be used. There are contractual, statutory and regulatory occasions when consent is not required.
However, in most cases data will only be processed if explicit consent has been obtained.
Consent is defined by the GDPR as “any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her”.
Consent and Renewal
On the Academy website there are ‘Privacy Notices’ that explain how data is collected and used. It is important to read those notices as it explains how data is used in detail. Obtaining clear consent and ensuring that the consent remains in place and accurate, is important for the Academy.