1. GDPR IS A DATA PROTECTION GAME CHANGER
SCHOOLS’ EXISTING POLICIES WILL REQUIRE A COMPLETE REVAMP
COMPLIANCE BRINGS GREATER RESPONSIBILITIES
THERE’S VERY LITTLE TIME TO MAKE YOUR SCHOOL COMPLIANT

2. What is GDPRiS Schools MUST become GDPR compliant by 25th May 2018
GDPRiS does most of the tasks to achieve compliance
Its an auditing and mapping tool
Designed with Schools, MATS and Local Authorities in mind
It’s a cloud based web platform
Easy to use
Saves a lot of time & money to reach GDPR standards

3. Suppliers & Data Maps
Holds a directory of suppliers and products (self maintained)
Suppliers register for free and are supported through registration
Suppliers complete data maps for all their products
They can update and share as products evolve
For products and suppliers not included
Schools can invite suppliers
They can modify data maps for specific requirements
Schools can create data maps for those not recorded

4. Data Maps Data maps have fields, each field is defined with
Forename
Identification
Legally required
Low
Until off roll + 3Y
No cant remove
Data maps have fields, each field is defined with
Sensitivity
Legal Justification
Retention

5. School DPO user, (in school or remote)
Select products from directory for data map & compliance documents
ALL staff are loaded into GDPRiS
Map products to staff
Staff sent SAQ (termly) **
Report and manage data breaches **
Manages DP documents & training materials
Messaging with staff and suppliers

6. ** Accountability
Staff Data Protection Audit
Have you read the document ‘Green Park guidance to keeping personal data safe’ ? Please suggest improvements
I confirm that I understand my responsibilities in protecting personal information 
I confirm that I only store transmit or carry personal data securely and/or in an encrypted form.
I confirm that any device through which I access or store personal data is secured and strongly password protected
Staff accountability statements and training
Have you been on any DP training courses? Please list them
All staff are reminded of their responsibilities and confirm that they understand
A record is kept of all training

7. ** Manage Data Breaches
Staff report data breaches in the correct manner
DPO manages these with their superiors

8. Useful Documents
ICO’s ‘12 Steps to take now’ adapted specifically for schools

9. Useful Documents…

10. DO SOMETHING ABOUT GDPR NOW!