Offer of help to suppliers

[maturelady]

Please could anyone who is in direct contact with their suppliers that process personal data for your school pass on our offer of help with their GDPR preparations.

 

GDPR in Schools is offering a FREE data mapping service to all suppliers that process less than 30 personal data fields or data elements. (Name and Address count as 1 each even if they are split into multiple fields.) We are working with MIS suppliers, and very large system suppliers which will have many more than 30 fields in a different way.

 

Our data mapping process follows the GDPR guidelines and recognises for each field or element, purpose, legal basis for processing, how the rights of the individual are met, data sharing and other key properties. The suppliers with whom we are working have told us of their genuine reluctance to engage with us as they couldn’t believe what we were offering was free. There must be a catch!

 

Well there is a catch, but a good one!

 

Suppliers must agree to share their data maps with GDPRiS schools. So instead of providing data maps to all these schools individually, they work with us to get it right and we share it. However, once we have completed the mapping, we will return the map to the supplier to use with schools that do not use GDPR in Schools. If they change or update their systems they send us the changes and we will action and inform our schools. They will of course need to contact all other schools by other means.

 

We’re giving suppliers a massive push up the ladder to compliance. Sadly, we can’t write their data sharing agreements, privacy policies and the other mandatory documentation they need to give to you to demonstrate their compliance. We would if we could! We can however give them pointers to templates for such documents.

 

Please tell your suppliers to send their data field headings in an Excel spreadsheet to [email protected]. We’ll acknowledge and do the rest. We'll need a contact to put questions to if needed.

 

Thank you

[deano3693]

Hi,

 

Can i ask how many suppliers you now have data maps from? On the demo account we have there are only 4 or 5 but i'm guessing you don't share the whole lot on the Demo site?!

 

Regards,

Dean.

[maturelady]

We have in excess of 100 data maps for major suppliers ready for uploading.

 

We've held back uploading them until we have had details about the structure DfE expects from suppliers' maps. I have that now and our files are good to go. That's our job over the Easter holidays and we will publish the list at the beginning of the new term to our users. In addition to that we have a full mapping structure for EVERY supplier type, eg payment, cashless, curriculum, trips, etc

 

We are not too worried about MIS suppliers; all major suppliers including SIMS have published their GDPR preparation plans. The maps will be very large, these suppliers need to decide how best to present them.

 

Reports are now available on the platform and will be evolving as you tell us what you need. You can report on all your maps for things such as - where is sensitive data, who uses it, and why.

[deano3693]

We have in excess of 100 data maps for major suppliers ready for uploading.

 

We've held back uploading them until we have had details about the structure DfE expects from suppliers' maps. I have that now and our files are good to go. That's our job over the Easter holidays and we will publish the list at the beginning of the new term to our users. In addition to that we have a full mapping structure for EVERY supplier type, eg payment, cashless, curriculum, trips, etc

 

We are not too worried about MIS suppliers; all major suppliers including SIMS have published their GDPR preparation plans. The maps will be very large, these suppliers need to decide how best to present them.

 

Reports are now available on the platform and will be evolving as you tell us what you need. You can report on all your maps for things such as - where is sensitive data, who uses it, and why.

 

Excellent - We will definitely re-visit GDPRis after the Easter Break in this case.

[Claireashton]

Does anyone know if other suppliers are providing a way to download the data about an individual for a subject access request? Similar to how SIMS has introduced their Person Data Output report? Is this in the data mapping information? Thanks