Data Protection

Data Protection

DDAT has two legal entities, each governed by an academy trust (DDAT and DDAT2). Please click on the links below to access data protection and privacy notices for each trust.

To identify which Trust your school belongs to, please click here.

As the UK has now left the EU, there have been some changes to data protection legislation. To comply with the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019, every policy, notice and procedural guide that refers to ‘GDPR’ shall now be read as ‘UK GDPR’. The rights, responsibilities and data protection provided by the Data Protection Act 2018 and the GDPR are not changed. Our procedures and arrangements will not change.

Derby Diocesan Academy Trust Track and Trace Update

Please click here for an update regarding the NHS ‘Track and Trace’ scheme and its implications for data protection Derby Diocesan Academy Trust Track & Trace Update

Nuffield Early Language Intervention

As part of the government’s COVID-19 catch up package for schools, primary schools can apply for resources and will be able to access online training from the start of the spring term 2021.

The Nuffield Early Language Intervention (NELI) aims to improve the oral language skills of children aged 4-5 in need of support in this area and uses  LanguageScreen.

This involves the Trusts sharing pupil data for assessment and research purposes. Parents have the right to withdraw their child from research involving data from LanguageScreen (but their child’s scores can still be available to their child’s school). For further details, please click on the links below:

LanguageScreen’s terms and conditions

LanguageScreen’s Privacy Policy

Freedom of Information

The public has the right of access to information the Trust produces in the course of its work. The DDAT Freedom of Information Policy commits the Trust to make information available to the public as part of its normal business activities. Requests should be sent to or by writing to us.

Subject Access Request (SAR)

Individuals have the right to access their personal data and supplementary information held by DDAT and our academies. The GDPR and the Data Protection Act 2018 clarifies that the reason for allowing individuals to access their personal data is so that they are aware of, and can verify, the lawfulness of the processing (please refer to this guidance from the Information Commissioners Office).

If you wish to request information we hold about you, please complete and submit the online Subject Access Request form below. Alternatively, the form can be downloaded and sent to the relevant Trust School or DDAT Trust Office or you can email the Data Protection Officer at Any request in writing from the individual (Data Subject) will be considered as a valid request, whatever the format as long as it contains the relevant information to enable us to deal with your request.

Subject Access Request Form

Please fill out the form below with the requested information. It will be sent to the Trust’s Data Protection Officer and you will also be emailed a copy for your records. Alternatively, please download the Subject Access Request Form PDF here and post it to us.


    This form contains personal data as defined by the Data Protection Act 2018. As Data Controller, Derby Diocesan Academy Trust (DDAT) will protect the personal data provided and ensure that it is not passed to anyone who is not authorised to see it. The information provided will be processed in accordance with the regulations contained in the Act and the DDAT Data Protection Policy which is available above. By submitting this form, you agree that DDAT may process your information in accordance with these terms.