I am becoming increasingly anxious about the fact that I have had no guidance on what needs to be done to be GDPR compliant in our school. I have raised this in supervision and been told not to worry but as I am the only admin staff I feel the buck stops with me. However, I have tried reading all the information and I'm just getting more confused. If only someone would explain exactly what I need to do I will happily do it but nothing is forthcoming. Can I ask what procedures your school has put in place. I don't want to give too much away about my school but it is tiny and we have no direct contact with parents.