Skip to content ↓
Meadowhead School

Meadowhead SchoolAcademy Trust

Data Protection

Please download the full policy at the foot of this page, which sets out: definitions, roles and responsibilities, collecting and sharing data, subject access request, biometric recognition, CCTV, photographs etc


Meadowhead School Academy Trust aims to ensure that all personal data collected about staff, pupils, parents, governors, trustees, visitors and other individuals is collected, stored and processed in accordance with the UK data protection law. This policy applies to all personal data, regardless of whether it is in paper or electronic format.

Legislation and guidance

This policy meets the requirements of the:

● UK General Data Protection Regulation (UK GDPR) – the EU GDPR was incorporated into UK legislation, with some amendments, by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020

Data Protection Act 2018 (DPA 2018)


● It is based on guidance published by the Information Commissioner’s Office (ICO) on the UK GDPR and guidance from the Department for Education (DfE) on Generative artificial intelligence in education.

It meets the requirements of the Protection of Freedoms Act 2012 when referring to our use of biometric data. It also reflects the ICO’s guidance for the use of surveillance cameras and personal information. In addition, this policy complies with our funding agreement and articles of association.


Our Data Protection Officer (DPO) is Toby Wilson (EduDataPro) and is contactable via

Internally, our data protection lead is the Deputy Business Manager.