djrscally Posted January 18, 2018 Posted January 18, 2018 ...How is your school making GDPR related decisions? I assume (like for me) this has been mostly passed to the data/it manager, but I also assume you're not just dictating how it will all be and have some form of working group to make the decisions - who's on that group? 1
tekins Posted January 18, 2018 Posted January 18, 2018 We had our first GDPR working party meeting on Tuesday, there were reps from IT, Payroll, Admin, SIMS and the Business Manager. Next task is to do a data flow! 3
jthompson Posted January 18, 2018 Posted January 18, 2018 For us it's been a topic in our fortnightly IT meetings (my LM chairs those meetings and is in SLT), but ultimately SLT have had the final say on things. 2
enjay Posted January 19, 2018 Posted January 19, 2018 We have identified who our DPO will be and are sourcing suitable training. In the meantime, a lot of it is falling to me as a) the majority of GDPR is IT-related, b) the even bigger majority of the change from DPA to GDPR is IT-related, c) I have the capacity in my working day to focus on it. The Head, Deputy (my LM) and Business Manager are all involved and supportive; other staff will be included as needed (Finance, HR, Exams, SENCo) but as they all answer directly to either Head, Deputy or Business Manager that is covered for now. 1
sparkeh Posted January 19, 2018 Posted January 19, 2018 Currently we have a group of Me, a Governor who has been given GDPR responsibility and SLT. As it stands, I am doing most of the research, keeping up to date with developments and reporting back. The governor is coming to GDPR related meetings. The Chair of Govs is also being kept in the loop. 1
manick Posted January 19, 2018 Posted January 19, 2018 We have Myself, Business Manager, Deputy Head, Admin Manager and Personnel person. We've just had our 2nd meeting and myself and the business manager are doing a lot of the legwork at this point. 1
djrscally Posted January 19, 2018 Author Posted January 19, 2018 Keep the answers coming, but thanks everyone; I'm basically including the same group here and it's a comfort to know I'm at least doing the same as the rest of you!
ReverentCreature Posted January 19, 2018 Posted January 19, 2018 (edited) The business manager is doing it all. We have no working group, have had no meetings and I don't know who is going to be the DPO. I have looked over all the notes she has made so far. I have made a few odd changes to the systems. We are a small primary school and a bit out of our depth to be honest but probably doing a lot better than many other schools Edited January 19, 2018 by ReverentCreature
jmak Posted January 19, 2018 Posted January 19, 2018 SLT have discussed it and watched a webinar, head teacher and business manager have been to presentations/training, decision has been made to out-source [emoji4]
kennysarmy Posted January 19, 2018 Posted January 19, 2018 Working party here is assistant head, data manager, bursar and myself (NM) - so far DM has being most of the work in identifying data we hold.
enjay Posted January 19, 2018 Posted January 19, 2018 SLT have discussed it and watched a webinar, head teacher and business manager have been to presentations/training, decision has been made to out-source [emoji4] You can outsource the DPO role, but you probably can't outsource the work the DPO will tell you to do...
jmak Posted January 19, 2018 Posted January 19, 2018 You can outsource the DPO role, but you probably can't outsource the work the DPO will tell you to do...Yeah - that will be long winded and time consuming, but doable. I'm just glad it's not me handing out the instructions [emoji41] Step one is that they're coming in to give us an assessment of what has to be done.....
foofighterjim Posted January 19, 2018 Posted January 19, 2018 You can outsource the DPO role, but you probably can't outsource the work the DPO will tell you to do... Exactly what we are doing. Staff here have recently had a data awareness meeting and I did a presentation this morning on where we currently are regarding staff USB devices and like likely courses of action available to us to ensure compliance.
tj2419 Posted February 8, 2018 Posted February 8, 2018 How is everyone getting on? We have a working group of Myself (NM), business manager, data manager, clerk to governors, HR. Not much is getting done with ours so I was wondering how everyone is delegating the different jobs? I have taken lead on our working party organising the data mapping and having sit down meetings with each of the other working party members on a one to one basis to get it complete. I have organised another meeting but feel like we need to take action on things now e.g. make definitive decisions on retention periods, start updating the privacy policies etc. Has anyone got either examples of how the work / jobs are being delegated out and any examples of your retention periods for the different types of data e.g. financial, student records, photos of students, student work areas, assessment files like excel tracking sheets. We look like we are going to buy into an SLA with the LEA but I feel by the time that is in place we need to have a lot of the ground work done. Thanks
djrscally Posted February 9, 2018 Author Posted February 9, 2018 Check out the IRMS toolkit. Page 37 has their sort of proforma retention period: IRMS Schools Toolkit - Information and Records Management Society 2
enjay Posted February 9, 2018 Posted February 9, 2018 Check out the IRMS toolkit. Page 37 has their sort of proforma retention period: IRMS Schools Toolkit - Information and Records Management Society Note those retention periods are legal minimums, not legal maximums. We can retain for longer if we can justify it. Or so I was told yesterday.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now