GDPR IS A DATA PROTECTION GAME CHANGER SCHOOLS’ EXISTING POLICIES WILL REQUIRE A COMPLETE REVAMP COMPLIANCE BRINGS GREATER RESPONSIBILITIES THERE’S VERY LITTLE TIME TO MAKE YOUR SCHOOL COMPLIANT

What is GDPRiS Schools MUST become GDPR compliant by 25th May 2018 GDPRiS does most of the tasks to achieve compliance Its an auditing and mapping tool Designed with Schools, MATS and Local Authorities in mind It’s a cloud based web platform Easy to use Saves a lot of time & money to reach GDPR standards

Suppliers & Data Maps Holds a directory of suppliers and products (self maintained) Suppliers register for free and are supported through registration Suppliers complete data maps for all their products They can update and share as products evolve For products and suppliers not included Schools can invite suppliers They can modify data maps for specific requirements Schools can create data maps for those not recorded

Data Maps Data maps have fields, each field is defined with Forename Identification Legally required Low Until off roll + 3Y No cant remove Data maps have fields, each field is defined with Sensitivity Legal Justification Retention

School DPO user, (in school or remote) Select products from directory for data map & compliance documents ALL staff are loaded into GDPRiS Map products to staff Staff sent SAQ (termly) ** Report and manage data breaches ** Manages DP documents & training materials Messaging with staff and suppliers

** Accountability Staff Data Protection Audit Have you read the document ‘Green Park guidance to keeping personal data safe’ ? Please suggest improvements I confirm that I understand my responsibilities in protecting personal information  I confirm that I only store transmit or carry personal data securely and/or in an encrypted form. I confirm that any device through which I access or store personal data is secured and strongly password protected Staff accountability statements and training Have you been on any DP training courses? Please list them All staff are reminded of their responsibilities and confirm that they understand A record is kept of all training

** Manage Data Breaches Staff report data breaches in the correct manner DPO manages these with their superiors

Useful Documents ICO’s ‘12 Steps to take now’ adapted specifically for schools

Useful Documents…

DO SOMETHING ABOUT GDPR NOW!