Our team sorts through all blog submissions to place them in the categories they fit the most - meaning it's never been simpler to gain advice and new knowledge for topics most important for you. This is why we have created this straight-forward guide to help you navigate our system.
And there you have it! Now your collection of blogs are catered to your chosen topics and are ready for you to explore. Plus, if you frequently return to the same categories you can bookmark your current URL and we will save your choices on return. Happy Reading!
There is much panic related to the implementation of GDPR in May 2018, yet it is pertinent to note that GDPR came into effect in 2016! However, organisations have been given 18 months to prepare before the enforcement of the new regulations begin.
Compared to many private organisations, schools are much better placed to address the new regulations. Make no mistake, GDPR is a data protection game-changer and it will bring new demands and challenges that will impact school resources and ultimately finances.
In education, there has always been a culture that values every person’s rights and freedoms, and schools have always had to give parents and children access to their data. Let’s take a brief look at the 5 key things schools need to be aware of and how they might prepare for GDPR implementation.
1. Individuals rights
GDPR gives more control to individuals, and their rights have been clarified. In broader terms no data may be processed unless all rights are considered and fulfilled, where relevant.
These are:
What you can do to prepare:
2. Data Processors/School suppliers
GDPR mandates a formal contract/SLA with all suppliers that process data, including how the data is stored and managed. It is the school’s responsibility to be proactive in establishing if 3rd party suppliers are GDPR compliant. If there was a data breach or non-compliance by a supplier, the school (as the Data Controller) may be held jointly liable.
What you can do to prepare:
3. Accountability
GDPR brings a much greater focus and accountability and evidence. School governing bodies are solely responsible for their compliance with the principles of GDPR and must be able to demonstrate their compliance.
What you can do to prepare:
4. Data Protection Officers (DPOs)
It will be mandatory for schools to appoint a data protection officer, you can appoint your own DPO internally or externally and can share a DPO with other schools. The GDPR does not specify the relevant qualifications that DPOs need, but it does require a DPO to have
“expert knowledge of data protection law and practices.” It is important to remember that the DPO is there as supervisor to ensure you comply and offer guidance. The DPO bears no liability for any data breach or non-compliance.
What you can do to prepare:
5. Data Breaches and Subject Access Requests (SARs)
It will be mandatory to report data breaches to the ICO within 72 hours where an individual is likely to suffer physical or mental harm.
Subject Access Requests (SARs) also have a lower timescale than the previous act. It will be mandatory to respond within 1 month and the biggest change is that you are no longer able to levy the fee of £10 for SARs.
What you can do to prepare:
Schools with existing rigid data protection policies should see GDPR as an opportunity to improve the way they work – not a stick to beat them with. The most important thing to say is ‘don’t panic’ BUT do ‘start preparing now’, if you haven’t already. GDPRiS has put together free resources for schools to access and download to help them on their journey to compliance.
You must be logged in to post a comment.
The author
Read more
Read more
Read more
Read more
Read more
Read more
Read more
Read more
Are you looking for solutions? Let us help fund them! Nexus Education is a community of over 11,000 schools that come together to share best practise, ideas and CPD via online channels and free to attend events. Nexus also offers funding to all school groups in the UK via nexus-education.com
Established in 2011, One Education is a company at the heart of the education world, supporting over 600 schools and academies. Our unique appeal as a provider is in the breadth and synergy of the services we offer, supporting school leaders, teachers and support staff to achieve the best possible outcomes for their pupils and staff.
School Space is a social enterprise that has empowered schools for over 12 years through their profitable and hassle-free lettings services. So far, they’ve generated over £5 million in revenue for education, helping to connect over 200 schools with their local communities.
Operoo is a school operations and productivity platform. We help thousands of schools and trusts to eliminate slow, expensive and repetitive tasks. Operoo helps schools streamline and digitise processes, drastically reducing the associated costs: From student pre-admissions, permission forms, payments, and school trips; to medical information and emergency contacts, incident reporting, staff agreements, and more in over 100 languages.
Unify is an online sales and marketing tool that allows users to create tailored personalised documents in moments.
There’s nothing special about the energy we sell. In fact, it’s exactly the same energy as all our competitors provide. But there is something special about the way we do it. Where others complicate the process, we simplify it. Where others confuse customers with hidden terms, we’re an open book. And where others do all they can to make as much money from their customers as possible, we do all we can to make as little. Everything we do, we do it differently. Our customers are a privilege. One we’ll never take advantage of.
Securus provide market-leading monitoring solutions to safeguard students on ALL devices both online and offline. We also offer a full monitoring service, where we carry out the monitoring on behalf of the school, freeing up valuable staff resources. From the smallest school to large MAT groups, Securus offers safeguarding protection for all!
As European leaders of Time Management Solutions, Bodet offer Lockdown, Clock, Bell & PA Systems. Harmonys, our five-in-one IP/PoE Bell System, provides a unique customisable lockdown or panic alarm alert. Melodys, a Wireless Bell System, is useful where wiring can be difficult.
Great article. Lots of scaremongering around at the moment but this helps put it all in perspective.