SAM admissions

[enjay]

Our LA has just started using SAM School Admissions Module. The LA enter details of applicants, share the data with us, and we record admission criteria against each child. Oddly, it appears we might tell the LA a student has an EHCP or is LAC (you'd think the LA would know that), so we are sharing personal information, including special category. Do we need to do a DPIA for this or list them on our data sharing partners, or can we leave it since we're not the Data Controller?

[GrumbleDook]

You are the Data Controller, as are they. You need to decide whether you are Joint Controllers (working on the data for the same purpose and only for that) or independent controllers who are sharing data for possibly common purposes but with each having different decisions to make.

At this point, a data sharing agreement should be around.

If they have chosen SAM as the system to use, then ask them for a copy of their DPIA. This should shortcut your work on it.