Navigate Up
Sign In

Data Protection Policy

The General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act (Cap 586) regulate the processing of personal data whether held electronically or in manual form. The National School Support Services (NSSS) is set to fully comply with the Data Protection Principles as set out in such data protection legislation.

Purposes for collecting data
The NSSS strives to enhance the holistic development of ALL children. NSSS provides equitable and high-quality services focusing on the physical, social, emotional, psychological, cultural, and behavioural development of children within an inclusive-oriented culture, aimed at eliminating challenges and barriers, to help children reach their full potential.

The NSSS collects and processes information to carry out its obligations in accordance with present legislation.  All data is collected and processed in accordance with Data Protection Legislation, the Education Act (Cap. 605) and the Processing of Personal Data (Education Sector) Regulations (S.L. 586.07). 

Recipients of data
ersonal Information is accessed by the employees who are assigned to carry out the functions of the NSSS.  Personal Data will be disclosed to a number of data processors who provide the various services on behalf of the NSSS and any relevant Health Authorities if and as necessary.  Disclosure can also be made to third parties but only as authorized by law.

Your rights
You are entitled to know, free of charge, what type of information the NSSS holds and processes about you and why, who has access to it, how it is held and kept up to date, for how long it is kept, and what the Unit is doing to comply with data protection legislation.

The GDPR establishes a formal procedure for dealing with data subject access requests.  All data subjects have the right to access any personal information kept about them by the NSSS, either on computer or in manual files. Requests for access to personal information by data subjects are to be made in writing and sent to the Director of the NSSS.  Your identification details such as ID number, name and surname have to be submitted with the request for access.  In case we encounter identification difficulties, you may be required to present an identification document.

The NSSS aims to comply as quickly as possible with requests for access to personal information and will ensure that it is provided within a reasonable timeframe and in any case not later than one month from receipt of request, unless there is good reason for delay. When a request for access cannot be met within a reasonable time, the reason will be explained in writing to the data subject making the request.  Should there be any data breaches, the data subject will be informed accordingly.

All data subjects have the right to request that their information is not used or is amended if it results to be incorrect.  Data subjects may also request that their data is erased.

These rights may be restricted, if applicable, as per Data Protection Legislation.

In case you are not satisfied with the outcome of your access request, you may refer a complaint to the Information and Data Protection Commissioner, whose contact details are provided below.

Retention Policy
Your personal data is collected under one of the legal grounds outlined in Article 6 of the GDPR, depending on the service being provided.

The retention requirements for the data processed within the NSSS are outlined in the specific retention policies.

Data that needs to be destroyed after the noted timeframes will be disposed of in an efficient manner ensuring that such information is no longer available within the NSSS.

The Data Protection Officer may be contacted as follows:

2598 1305

Postal Address:
​Data Protection Officer
Ministry for Education, Sport, Youth, Research and Innovation
Office of the Permanent Secretary
Great Siege Road
Floriana VLT 2000


Data Controller
The Director National School Support Services may be contacted as follows:



​2598 3497

Postal Address:

National School Support Services,
Fra Gaetano Pace Forno Street,

The Information and Data Protection Commissioner
The Information and Data Protection Commissioner may be contacted at:



2328 7100

Postal Address:

Level 2, Airways House,
High Street,
Sliema  ​SLM 1549