On 25th May the new General Data Protection Regulation (GDPR) came into force.  This is a piece of EU-wide legislation which determines how people’s personal data is processed and kept safe, and the legal rights individuals have in relation to their own data. It applies from to organisations that process or handle personal data, including schools.