Data protection and GDPR

General Data Protection Regulation (GDPR)

From 25 May 2018 schools need to be compliant with the new legislation. Links to information, resources and tools that schools may find useful in making preparations are listed below.

General guidance on GDPR

• GOV.UK – Data protection: toolkit for schools
• Information Commissioner’s Office
• National Governors Association 
• London Grid for Learning (LGfL) – select GDPR from the dropdown Topic menu
• Times Education Supplement

Webinars and blogs

• DfE
• Browne Jacobson
• Optimus Education GDPR BLOG

Roles and responsibilities

• DPO – The role of the Data Protection Officer (ICO)

Data mapping

All schools will need to undertake an exercise to map the personal data they hold and the data flows.  The Council has produced a data mapping template (Excel spreadsheet) which schools may choose to use but there are a number of others available including the LGfL School Data Audit which can be found on the London Grid for Learning website (see above).

Data protection impact assessments

• Example data protection impact assessment template

Procurement policy note (PPN)

Procurement Policy Note 03/17: Changes to Data Protection Legislation & General Data Protection Regulation – contains specimen statements for new and existing contracts and specimen letter to suppliers

Other specimen documents, letters etc

• Data protection: privacy notice model documents – GOV.UK
• Privacy notice suggested text for school and trust governance roles