The Trust is a data controller as defined by the UK General Data Protection Regulation and the Data Protection Act 2018 and as a consequence it’s required to maintain a ROPA.
The Trust processes large volumes of personal data. Our data processing activities take place across the entire trust, including: Safeguarding, IT Services; Finance, Human Resources, Communications and Marketing, Estates, Compliance, Governance, Training and education development activities.
The ROPA details the categories of data subjects and personal data that we process, as well as the purpose of the processing along with any recipients the personal data may be shared.