Data Protection Act 1998 GDPR Data Protection Act

Data Protection Act 1998 GDPR Data Protection Act 2018 Schools ICT Effective from 25 th May 2018

• Latest information on GDPR and Data Protection Act • Feedback from meeting on GDPR in school audits • Update on Wandsworth shared DPO service • Q&A session on issues/concerns Schools ICT GDPR support session

Survey highlights on preparation and GDPR readiness • 66% have not yet completed a data audit as part of GDPR preparation. • Only 29% agree their current data protection policies and practice meet good data protection standards, and that they are GDPR ready. • 69% are not confident that the school knows the legal basis for all their data processing. Schools ICT Latest information on GDPR and Data Protection Act

What do schools say is missing that they need for GDPR? Clear guidance 77. 14 % An assigned DPO role 77. 14 % Clarity on changes 71. 43 % Understanding legal basis for holding data 65. 71 % Expected standards 62. 86 % Funding 60. 00 % Senior leadership support 51. 43 % Third-party support 45. 71 % Third-party data audit functions 34. 29 % Nothing missing. We are confident that our policies are compliant 0% Other 11. 43 % Schools ICT Latest information on GDPR and Data Protection Act

Latest information on GDPR and Data Protection Act Schools ICT

Latest information on GDPR and Data Protection Act Schools ICT

• Audit not assessing GDPR compliance • Will discuss progress in initial meeting with Head/SBM • Will ask about progress with data audit, privacy notices and governance • Will ask about your DPO choice • Any issues, will ask you to discuss with us • Will be updating pre-audit questionnaire and will send me a copy to check if reasonable Schools ICT Feedback from meeting on GDPR in school audits

• Has been approved and post has been established • Advert out this week • Interviews week of 14 th May • Will be writing to schools to ask for intention to buy service, so we can develop plans and provide firmer costs. • I can be named as your DPO in the interim Schools ICT Update on Wandsworth shared DPO service

• GDPR data processing agreements with suppliers, local authority teams, etc • Queries on when to use Consent as the legal basis for collecting personal data • Clerks to Governors, Livescribe devices • AUP’s and devices • DPO advice • Can we use O 365, Gsuite, Dropbox? • Staff pictures in reception – need consent? • Signing in books, where you can see others names. • What further training/support is required? Schools ICT Q&A session on issues/concerns