What is the UK GDPR?
The UK General Data Protection Regulation (UK GDPR) works with the Data Protection Act 2018 (DPA 2018) to form the UK's data protection framework. It was created in 2021, when the EU GDPR was incorporated into UK legislation by this piece of legislation.
The UK GDPR determines how a person's personal data is processed and kept safe, and the legal rights individuals have over their own data.
The key principles, rights and obligations remain the same as under EU GDPR, but there are some amendments, mainly around international transfers of data (see section 3).
The Department for Education (DfE) has published some guidance to help education providers stay compliant.
Why do governors need to know about it?
As the board of governors, or trustees in