The General Data Protection Regulation  has replaced the Data protection Act and is their to strengthen and unify all data held in the school organisation. GDPR brings a responsibility to inform parents and stakeholders about how they are using pupils' data and who it is being used by.