UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018; this sets out how personal data may be obtained and processed lawfully (separate advice for schools is available)
Deddf Diogelu Data 2018 a’r Rheoliad Cyffredinol ar Ddiogelu Data (GDPR)