Brexit GDPR position
As I have been asked for confirmation of what happens regarding GDPR by quite a few schools I thought I would post a clarification.
The UK left the EU on 31st January and has entered a Brexit transition period, which runs until the end of December 2020. It will be business as usual for data protection; GDPR will continue to apply. Organisations that process personal data should continue to follow the ICO's existing guidance on data protection matters.
It is not yet known what the data protection landscape will look like at the end of the transition period and the ICO recognises that organisations will have concerns about the flow of personal data in future. They will continue to monitor the situation and update their external guidance accordingly. I will obviously continue to keep those who are interested updated via this blog.