GDPR suppliers table

[timbo343]

This may have been asked before and the searches im trying aren't bringing up what i want but does anyone have a template excel sheet with suppliers / contracts such as Show My Homework, cunninghams, GroupCall that shows what these companies are taking from our MIS database?

 

I found one online but can i heck remember what i searched for to bring it up or even what the URL was.

 

Thanks

[GREED]

Have you logged into Xporter on Demand recently? It shows all of this there...

[timbo343]

I've just been in it and seen all the suppliers that use our data but i cannot see what they are taking off us.

 

What about those that we submit CSV data to?

 

I wish i could find the site that had the table which shows the companies that take data off schools.

[Cache]

At the March ANME NW meeting, I think @GrumbleDook showed us a rather useful looking spreadsheet - I keep meaning to ask whether that's something that it specifically for GDPRiS or was it something publically available?

[mjk]

This may have been asked before and the searches im trying aren't bringing up what i want but does anyone have a template excel sheet with suppliers / contracts such as Show My Homework, cunninghams, GroupCall that shows what these companies are taking from our MIS database?

 

I found one online but can i heck remember what i searched for to bring it up or even what the URL was.

 

Thanks

My understanding of GDPR is that the school needs to create the contract and have the suppliers sign it because the school is the data controller. If the data processors are creating the contracts it is rather putting the cart before the horse.

[bobsmith]

My understanding of GDPR is that the school needs to create the contract and have the suppliers sign it because the school is the data controller. If the data processors are creating the contracts it is rather putting the cart before the horse.

 

Agreed but it's also slightly insane. If a company makes school software and has a granular approach to what data it extracts - which we control - then a standard contract written by them makes sense provided it ticks the right boxes.

 

If you were to have some bespoke software made then it's a different situation where a standard contract wouldn't work.

[mjk]

Agreed but it's also slightly insane. If a company makes school software and has a granular approach to what data it extracts - which we control - then a standard contract written by them makes sense provided it ticks the right boxes.

 

If you were to have some bespoke software made then it's a different situation where a standard contract wouldn't work.

 

The problem is with many of the contracts written up by the suppliers are designed by their lawyers to protect the company. What the school needs is a contract that protects the school. This is where the problem lies. The bigger companies (Google,Microsoft et al) have this sorted out because they have staff who understand the legal complexities. The smaller firms just go to their local solicitors, who are not GDPR specialists, and then draw up a generic contract that isn't suitable for the school.