Mailchimp

[Reboot_IT]

Hello,

 

Please can somebody provide some advice. We have a new member of SLT at one of our secondary schools who wants to implement Mailchimp for sending things to parents. This is to reduce the amount of paper and record statistics for who is reading the email etc. They all sound like good enough reasons however I have my concerns. Unless somebody else knows otherwise, a CSV will be required to upload parent email addresses which requires a manual intervention (not ideal) and difficult to keep up to date.

 

The software company is based in the USA which means it's likely the data will be stored there. Isn't that an issue with regards to GDPR and data being kept outside of the EU (please don't move onto brexit debates!) or is that a myth?

 

If anybody knows of a readily made alternative to this - that would be fantastic.

 

Thanks,

Karl

[LeMarchand]

Most of mine use https://www.parentmail.co.uk/ which syncs with the MIS.

[mavhc]

Not exactly a myth.

 

https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-transfers/

 

https://mailchimp.com/legal/data-processing-addendum/#6._International_Transfers

 

https://mailchimp.com/help/import-contacts-from-other-services/

 

They also have an API

[AndyCrow]

Mailchimp servers and offices are located in the United States, so your information will be processed in the United States. However, Mailchimp has certified its compliance with the EU-U.S. Privacy Shield Framework which should currently satisfy GDPR requirements.

The school should conduct a DPIA on the product and state on the schools Privacy Notice that there would be a transfer of data outside the EEA which is covered by Privacy Shield.