Practical Changes for Schools

[Gongalong]

Hi folks,

 

I was asked what the practical changes are for schools with GDPR, which I thought was a good question. Off the top of my head I could list the following:

 

Consent = more care needs to be taken with data collected and ensuring that there is consent for it, which leads onto...

Data Mapping = clear documentation on what data we have, where it is, consent to have it etc.

Privacy Notice = a compliant privacy notice (which some schools at least would have a version of previous legislation)

Policy = a compliant data protection policy (again, some schools may have had a version of this for the previous legislation)

Data Protection Officer = required for public authorities

 

What do others feel are practical changes?

 

Thanks

[TechMonkey]

Consent is the biggie as people have got used to asking a question and taking silence as consent. Schools will now need to have a process for collecting, recording and chasing up responses.

Awareness and some kind of reporting will be the other. Staff do have a habit of striking out and signing up themselves and their pupils to a new service, but this will need to be more considered as otherwise the data mapping will get out of date and if a service they use is breached we may have to report on it.

[Gongalong]

Ah yes, which leads onto Data Protection Impact Assessments.