Data Protection & Information Handling Resources

[elsiegee40]

Welcome to the Data Protection and Information Handling thread about resources.

 

This will allow everyone to see the range of resources people may have found, allow people to keep track of any notifications on new or updated information and to ensure that we all have the materials to help raise awareness of any forthcoming changes to laws (not just UK/EU).

 

This is:

• Not an area for discussion on the resources (take it to another thread and the link to the resource can be moved later if needed),
  
• Not an area to discuss any specific issues you are having with implementation (best if you raise a separate thread on that)
  
• Not an area for companies or consultants to sell advice (sponsors / agreed partners can raise these in separate threads ... any others need to contact The Admins first)
  

Edited June 20, 2017 by ZeroHour

[GrumbleDook]

Thanks for making this a sticky thread.

 

First of all, here are the slides from the presentation.

http://www.edugeek.net/cms/attachments/43876d1497601349-edit17-mobileguardian-gdpr.pptx.html

and the presentation too.

 

The URLs in the presentation were ...

• gdpr reform ico.org.uk
  
• GDPR Wiki - Nicole Lamoureux
  
• it governance
  
• GDPR in Schools
  

 

A link I missed out of the presentation is ...

Protection of personal data - European Commission

Edited June 28, 2017 by elsiegee40

[elsiegee40]

The General Data Protection Regulation (GDPR) - kelsi.org.uk

[elsiegee40]

Preparing for the General Data Protection Regulation (GDPR): 12 steps to take now - ico.org.uk

[russdev]

Hello

 

My contribution to the resources.

 

Unlocking the EU General Data Protection Regulation: A practical handbook on the EU's new data protection law - White & Case

 

Russ

 

Edited June 29, 2017 by elsiegee40

[Quatermass]

GDPR: who needs to hire a data protection officer?

[jdoyle]

ICO webinar and slides

 

 

ICO GDPR Overview

[jdoyle]

Children's Commission Growing Up Digital Report

[jdoyle]

House of Lords Communications Committee : Children and the Internet Inquiry (page 43 in the PDF for GDPR comments on age)

[jdoyle]

with the new Data Protection Bill now going through the House of Lords, it is possible to sign up to be notified by email of its progress through the legal stages

 

Data Protection Bill [HL] 2017-19 — UK Parliament

[GrumbleDook]

The email alert service from gov.uk is very handy. You can do it for most parts of the site, so you are aware of funding changes, Safeguarding updates, etc.

 

Set it to daily digest though otherwise you get buried on certain days.

[Mel_GDPRiS]

GDPR Timeline

Just thought you'd be interested in our GDPR Timeline - it guides schools through the preparations they should be undertaking each month between now and 25 May 2018.

 

https://www.gdpr.school/gdpr-timeline/

There's lots of other free resources on our website

Edited October 18, 2017 by Mel_GDPRiS

[jdoyle]

Statutory policies for Schools

Advice on the policies and documents that governing bodies and proprietors of schools are required to have by law

 

https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/357068/statutory_schools_policies_Sept_14_FINAL.pdf

[Mel_GDPRiS]

Which types of suppliers do schools need to include in their data audit under GDPR?

 

We hope our latest blog will provide clarity for schools.

[tinkerbotsict]

Which types of suppliers do schools need to include in their data audit under GDPR?

 

We hope our latest blog will provide clarity for schools.

 

Any that you share or generate data

[jdoyle]

free GDPR course on FutureLearn run by Uni of Groningen so likely to have a European perspective

 

https://www.futurelearn.com/courses/general-data-protection-regulation

[6Foot2]

Link 1: GDPR Awareness Coalition

 

The General Data Protection Regulation (GDPR) sets out the principles for how the personal data of your staff, clients and suppliers is handled, as it pertains to the rights of the individual.

 

The GDPR is a legal framework that sets guidelines for the collection and processing of personal information of individuals within the European Union (EU), and takes effect on 25 May, 2018.

 

The General Data Protection Regulation covers ALL companies that deal with the data of EU citizens, so it is a critical regulation for a wide range of companies, from the very large multinational conglomerate to the corner shop with one employee. All involved parties will need to be initially aware and then subsequently prepared.

 

Link 2: Infographics | GDPR Awareness Coalition

[6Foot2]

Link: Free GDPR Resources For Schools

 

[jdoyle]

Privacy by Design resources

 

ICO

https://ico.org.uk/for-organisations/guide-to-data-protection/privacy-by-design/

 

7 Principles of Privacy Design by Information and Privacy Commissioner of Ontario, Canada, Dr. Ann Cavoukian

https://iab.org/wp-content/IAB-uploads/2011/03/fred_carter.pdf

[6Foot2]

Link: GDPR Risk Analyzer Tool

 

Evaluate your risk by analyzing a sample folder of your organization’s file content. Your file content will be securely uploaded and deleted immediately after analysis. No content is retained by Veritas. You can also choose to try the tool using our sample data.

 

Analysis summary using Veritas supplied sample data:

 

[jdoyle]

Retention and Disposal of school records :

 

A bit dated but possibly useful

 

https://www.lincolnshire.gov.uk/upload/public/attachments/898/schools_retention_and_disposal_schedule.pdf

 

More up to date, generic, looks very paper based

 

http://ldbsact.org/download/policies/Document%20Retention%20Schedule_Nov15.pdf

[6Foot2]

How it Works: GDPR ("GDPR for dummies")

 

How it Works GDPR.PDF

 

 

13 page PDF.

[elsiegee40]

See this thread by @maturelady

Free resources for school DP leads and GDPR information to share with parents

[jdoyle]

Google Analytics has announced some changes for GDPR e.g. setting Data Retention value which you may want to take a look at if you use Google Analytics with your school website

 

https://support.google.com/analytics/answer/7667196?hl=en&ref_topic=2919631

 

More to follow e.g

"Before May 25, we will also introduce a new user deletion tool that allows you to manage the deletion of all data associated with an individual user (e.g. site visitor) from your Google Analytics and/or Analytics 360 properties. This new automated tool will work based on any of the common identifiers sent to Analytics Client ID (i.e. standard Google Analytics first party cookie), User ID (if enabled), or App Instance ID (if using Google Analytics for Firebase)."