The law regarding Data Protection has changed and the General Data Protection Regulations (GDPR) came into effect on 25th May 2018. GDPR brings higher standards for handling data and greater expectations for improved transparency, enhanced data security and increased accountability for processing personal data. Schools have a legal duty to comply with the GDPR.