GDPR IS A DATA PROTECTION GAME CHANGER SCHOOLS

GDPR IS A DATA PROTECTION GAME CHANGER SCHOOLS’ EXISTING POLICIES WILL REQUIRE A COMPLETE REVAMP COMPLIANCE BRINGS GREATER RESPONSIBILITI ES THERE’S VERY LITTLE TIME TO MAKE YOUR SCHOOL COMPLIANT

What is GDPRi. S • Schools MUST become GDPR compliant by 25 th May 2018 • GDPRi. S does most of the tasks to achieve compliance • Its an auditing and mapping tool • Designed with Schools, MATS and Local Authorities in mind • It’s a cloud based web platform • Easy to use • Saves a lot of time & money to reach GDPR standards

Suppliers & Data Maps • Holds a directory of suppliers and products (self maintained) • Suppliers register for free and are supported through registration • Suppliers complete data maps for all their products • They can update and share as products evolve For products and suppliers not included • Schools can invite suppliers • They can modify data maps for specific requirements

Data Maps Forename Identification Legally required Low Until off roll + 3 Y No cant remove Data maps have fields, each field is defined with • Sensitivity • Legal Justification • Retention

School DPO user, (in school or remote) • Select products from directory for data map & compliance documents • ALL staff are loaded into GDPRi. S • Map products to staff • Staff sent SAQ (termly) ** • Report and manage data breaches ** • Manages DP documents & training materials

** Accountability Staff Data Protection Audit Staff accountability statements and training I confirm that any device through which I access or store personal data is secured and strongly password protected I confirm that I understand my responsibilities in protecting personal information I confirm that I only store transmit or carry personal data securely and/or in an encrypted form. Have you read the document ‘Green Park guidance to keeping personal data safe’ ? Please suggest improvements Have you been on any DP training courses? Please list them • All staff are reminded of their responsibilities and confirm that they understand • A record is kept of all training

** Manage Data Breaches • Staff report data breaches in the correct manner • DPO manages these with their superiors

Useful Documents ICO’s ‘ 12 Steps to take now’ adapted specifically for schools

Useful Documents…

DO SOMETHING ABOUT GDPR NOW!