How do (or will) you store a single (accurate) record of Data Sharing agreements?

[pete]

We've been doing the "who do we do business with and what data gets transferred" audit for a while now. Every time we think we're nearly there, someone says "what about Bob" and we go again.

 

So, assuming you're all doing the same thing....how do you plan to empower staff to be able to quickly assess the validity of requests for data from third parties?

 

At a basic level, I'm thinking of something searchable that has fields such as:

 

Company / Org / Individual - Data sharing agreement in place Y/N - Valid until - Last reviewed - School Point of Contact - Data that can be shared.

 

And drilling down links to the actual data sharing agreements, contacts at the company etc.

 

Has anyone got as far as finding / building something that isn't a spreadsheet? I don't want outdated copies lying around.

Edited September 27, 2017 by pete

[enjay]

I'm wondering if a link between IT and Finance is the way to achieve this. Generally, a request for data will follow a purchase order and/or invoice for a service, so start there.

 

Then have a conversation with the HT about the others - they should know all the other organisations with whom data is being shared, otherwise speak to the Academic and Pastoral Deputy Heads and the SenCo. That should pick up all of the people with whom you're sharing data.

 

how do you plan to empower staff to be able to quickly assess the validity of requests for data from third parties?

 

Generally I think staff in schools are on top of this sort of thing already, as they're used to doing it with safeguarding data, so I don't think it will take much to get them following the GDPR rules instead of the DPA rules.

[GrumbleDook]

We've been doing the "who do we do business with and what data gets transferred" audit for a while now. Every time we think we're nearly there, someone says "what about Bob" and we go again.

 

So, assuming you're all doing the same thing....how do you plan to empower staff to be able to quickly assess the validity of requests for data from third parties?

 

At a basic level, I'm thinking of something searchable that has fields such as:

 

Company / Org / Individual - Data sharing agreement in place Y/N - Valid until - Last reviewed - School Point of Contact - Data that can be shared.

 

And drilling down links to the actual data sharing agreements, contacts at the company etc.

 

Has anyone got as far as finding / building something that isn't a spreadsheet? I don't want outdated copies lying around.

Cough... Can I interest you in a demo?

[pete]

Cough... Can I interest you in a demo?

 

Maybe - who're you working for these days? I didn't spot anything likely on the LP site (assuming I've got the right one).

 

My needs are twofold:

 

1. An easy-to-maintain accurate record with tiered access, sufficient details for those who need it but a simple "I just need to know if I can Information X to 3rd Party Y" interface to front-line admin and teaching staff"
   
2. Reminders near contract end/renewals that require a human to acknowledge "yes, this contract is still in place, it's OK to keep sharing this data".
   

 

Plus the usual audit trail requirements and built to a decent (i.e not "for education") standard.

 

Increasingly this sounds like I need to wrestle a CRM system into reverse (one customer, many vendors).

[GrumbleDook]

Maybe - who're you working for these days? I didn't spot anything likely on the LP site (assuming I've got the right one).

 

My needs are twofold:

 

1. An easy-to-maintain accurate record with tiered access, sufficient details for those who need it but a simple "I just need to know if I can Information X to 3rd Party Y" interface to front-line admin and teaching staff"
   
2. Reminders near contract end/renewals that require a human to acknowledge "yes, this contract is still in place, it's OK to keep sharing this data".
   

 

Plus the usual audit trail requirements and built to a decent (i.e not "for education") standard.

 

Increasingly this sounds like I need to wrestle a CRM system into reverse (one customer, many vendors).

 

With GDPR in Schools now (sig updated ... apologies).

 

Drop a line to [email protected] and have a chat with the team. I think we've got what you need covered.

[gsk]

Hi @GrumbleDook, Can you give us a rundown of what your product is please?

[Mel_GDPRiS]

Hi @gsk happy to give you a quick overview of the GDPR in Schools software (GDPRiS).

 

GDPRiS is an all-in-one data protection monitoring solution specifically designed with in-built knowledge of the data used in the schools’ sector. Our software offers schools visibility of the data being processed by their suppliers incl. pre-populated data maps, legal basis for processing, how the rights of the data subject are met, retention, information and supporting supplier compliance documentation; quick and effective reporting, tracking and management of potential data breaches; comprehensive auditing tools providing evidence-based accountability demonstrating the school’s compliance with GDPR; and it encourages a whole-school approach to data protection with highly secure user accounts for all staff to access policies, training materials, perform SAQs and report potential breaches to the DP lead or DPO.

 

I'd be happy to arrange for one of our team to give you a demo if you're interested in finding out more?

[Stutwo]

Just had this from Groupcall, I'll be interested to see what it does:

 

You are quite likely one of the 18,000+ UK schools that already has Groupcall Xporter installed to help process the data that powers third-party applications you subscribe to – such as homework, library or parental engagement systems.

 

With the GDPR deadline now clearly visible on the horizon, you will doubtless be doing your due diligence and mapping what data is being moved where and under what basis.

 

Groupcall will soon be launching an Xporter portal that will make this process much easier, allowing you to better understand and manage the data flows in your school

[gsk]

Hi @gsk happy to give you a quick overview of the GDPR in Schools software (GDPRiS).

 

GDPRiS is an all-in-one data protection monitoring solution specifically designed with in-built knowledge of the data used in the schools’ sector. Our software offers schools visibility of the data being processed by their suppliers incl. pre-populated data maps, legal basis for processing, how the rights of the data subject are met, retention, information and supporting supplier compliance documentation; quick and effective reporting, tracking and management of potential data breaches; comprehensive auditing tools providing evidence-based accountability demonstrating the school’s compliance with GDPR; and it encourages a whole-school approach to data protection with highly secure user accounts for all staff to access policies, training materials, perform SAQs and report potential breaches to the DP lead or DPO.

 

I'd be happy to arrange for one of our team to give you a demo if you're interested in finding out more?

 

Hi Mel. PM Sent