First DfE video on GDPR

[maturelady]

The DfE has published the first of a series of videos.

 

 

I think its very good.

 

Look forward to the next which covers SARs and retention.

Edited January 18, 2018 by maturelady

[jenatddm]

The DfE has published the first of a series of videos.

 

 

I think its very good.

 

Look forward to the next which covers SARs and retention.

 

What's other people's views?

[atcoates]

Better late then never!

[synaesthesia]

As above, this is the sort of thing we needed to see a long time ago. But other than that, it's clear and concise, doesn't make you doze off, doesn't make you go running for a lawyer to decode the mumbo-jumbo.

[jdoyle]

What's other people's views?

 

about 12 to 18 months late but useful as a starter. Would have liked a mention/examples re legal basis for processing and what that means for schools/data subjects.

 

Will be interesting to see something on Breach Notification and maybe how that links back to the "personal data ecosystem"

[enjay]

As an introduction, it is okay. As others have said, too late though - I suspect (hope?!) most schools know everything in this presentation already. I'll reserve final judgement until I've seen a few more.

 

I still think it is a shame the DfE are saying "produce a data map" rather than saying "you all handle the same data in the same ways, here's a data map for core functions - now go and add your own ones to the list". That would save us all doing the same work, and give us a good structure for an audit for everything else, e.g. what level of detail to go into.

[maturelady]

Oh I forgot!

 

The next video does cover:

 

Conditions for processing and when consent is needed.

 

Getting old! Thus @maturelady!

[GrumbleDook]

As an introduction, it is okay. As others have said, too late though - I suspect (hope?!) most schools know everything in this presentation already. I'll reserve final judgement until I've seen a few more.

 

I still think it is a shame the DfE are saying "produce a data map" rather than saying "you all handle the same data in the same ways, here's a data map for core functions - now go and add your own ones to the list". That would save us all doing the same work, and give us a good structure for an audit for everything else, e.g. what level of detail to go into.

 

This is where we help to fill in that gap.

 

Whether people think it is better or worse, the days of the Govt producing everything is gone ... a large portion of what Becta would do is being picked up by companies such as GDPR in Schools or others.

 

We try and give as much out as we can for free but some of the tools are part of our service.

 

Happy to chat with you on it next week.

[MattG92]

What's other people's views?

As others have said a good introduction but a bit late to be communicating this information to schools

[jurrel23]

Any links to GDPR?

[GrumbleDook]

Any links to GDPR?

 

If you look at the sticky threads at the top of this sub-forum you will see a range of topics include links to further information and resources

[tinkerbotsict]

Does anyone have the direct link to the this video so I can send to my headteacher

[6Foot2]

Does anyone have the direct link to the this video so I can send to my headteacher

 

This might be what you need:

 

Link:

 

HTH.

[tinkerbotsict]

Thanks it’s just embed it into the post I might just have to search for it on the web

[6Foot2]

Thanks it’s just embed it into the post I might just have to search for it on the web

 

I'll try beaking the hyperlink so that it will post as text (by inserting a spaces between the https and the : and between www. and the y)

 

'Link': https ://www. youtube.com/watch?v=y09IHXv6u6M

Edited January 21, 2018 by 6Foot2
Correct a typo. :(

[tinkerbotsict]

Thanks Dave

[Ditto]

The comments about the DPO role are interesting (4 minutes 17 seconds onwards). The topic of conflict of interest appears to be played down compared to discussions on this forum. The idea of a volunteer stepping up but having full DPO responsibilities equivalent to a paid employee or contracted service company just does not sound like good advice. My fear is some schools might interpret that as permission to call upon governing body members or parent volunteers - surely that's not really the right way to go.

[AngryITGuy]

The comments about the DPO role are interesting (4 minutes 17 seconds onwards). The topic of conflict of interest appears to be played down compared to discussions on this forum. The idea of a volunteer stepping up but having full DPO responsibilities equivalent to a paid employee or contracted service company just does not sound like good advice. My fear is some schools might interpret that as permission to call upon governing body members or parent volunteers - surely that's not really the right way to go.

 

Totally agree that the comments have downplayed the conflict of interest and have just made things more confusing.

 

The video states that the Head of the school and the IT Manager are excluded from the role due to conflict of interest where as the advice from GDPR In Schools say the Network Manager, Head, Designated Safeguarding Person, or Business/MIS Manager as being excluded from the role due to a conflict of interest.

[GrumbleDook]

The comments about the DPO role are interesting (4 minutes 17 seconds onwards). The topic of conflict of interest appears to be played down compared to discussions on this forum. The idea of a volunteer stepping up but having full DPO responsibilities equivalent to a paid employee or contracted service company just does not sound like good advice. My fear is some schools might interpret that as permission to call upon governing body members or parent volunteers - surely that's not really the right way to go.

 

Any request upon volunteers would still be on the basis on the required experience and knowledge. That should not be forgotten.

[GrumbleDook]

Totally agree that the comments have downplayed the conflict of interest and have just made things more confusing.

 

The video states that the Head of the school and the IT Manager are excluded from the role due to conflict of interest where as the advice from GDPR In Schools say the Network Manager, Head, Designated Safeguarding Person, or Business/MIS Manager as being excluded from the role due to a conflict of interest.

 

The DfE have covered the two most commonly raised roles that would have a conflict, and they could have spent more time on other examples, but the idea is to raise that there are conflicts and the school has to think what could be those conflicts.

 

There *will* be more materials to come and we will feedback on anything to help give you more clarity.

[DataGuy]

The comments about the DPO role are interesting (4 minutes 17 seconds onwards). The topic of conflict of interest appears to be played down compared to discussions on this forum. The idea of a volunteer stepping up but having full DPO responsibilities equivalent to a paid employee or contracted service company just does not sound like good advice. My fear is some schools might interpret that as permission to call upon governing body members or parent volunteers - surely that's not really the right way to go.

Absolutely agree....it's great to have something out like this video with some good overarching pointers....but the suggestion that volunteers may take up this role on the understanding that they assume the same statutory powers?....that is quite a sweeping statement made in the clip and speaking from experience who has managed teams of combined employees & volunteers, it is a potential minefield of employment law that you need to tread extremely carefully in. Don't get me wrong, we all know volunteers play an overwhelming part in our services & can/do bring in a wealth of expertise and plug many-a-gap in today's provision.

 

I get the DofE need to state an option & they have included it as a 'finally'.....but to drop the suggestion in on a 'top tips' video like this, I agree, perhaps could be backed up with more caveats....the emphasis on obligations re: regular internal audits & mandated updates to the board, statutory governance etc etc...tends to lead down the lines of contracts when you're looking at a legal point of view....I can hear HR Managers spluttering on their coffee as I type....

[Ditto]

One of the observations I've very much aligned to, from both an operational and governance point of view, is the DPO role is akin to the DSL role in many ways. Even with the skills, I don't think many schools would be comfortable with a volunteer to have that responsibility.

[jenatddm]

The comments about the DPO role are interesting (4 minutes 17 seconds onwards). The topic of conflict of interest appears to be played down compared to discussions on this forum. The idea of a volunteer stepping up but having full DPO responsibilities equivalent to a paid employee or contracted service company just does not sound like good advice. My fear is some schools might interpret that as permission to call upon governing body members or parent volunteers - surely that's not really the right way to go.

 

Hence one of my feedback comments to DfE asked who is funding DPO support, and I suspect why they won't want to make more of a thing of it. But you all could.

 

[enjay]

I suspect when they said "volunteer" they were probably thinking governor. That, or they're so Eton-minded, they think notable and influential ex-students are supporting all schools...

[gh5000]

Whether people think it is better or worse, the days of the Govt producing everything is gone ... a large portion of what Becta would do is being picked up by companies such as GDPR in Schools or others.

 

As best illustrated by this

 

Edited January 22, 2018 by gh5000