tubbsy

Hi, thank you for your response this is a big help. I'll send you my details if you would be as so kind to send the data map. THANK YOU !

Thank you Edutech98 for this much appreciated and I really appreciate all the messages from you all. If anyone has a completed or part complete data mapping tool or alike I can view but not copy would be good please.

Hi yes I can be the controller but not the officer. The officer can not be anyone in school who has access to any data but the controller can. I am now looking at purchasing GDPRis - a tool which does most of the hard work for you - apparently!??

Thank you for your reply. Our DPO is at the local authority and we pay for their support. I am the school's Data Protection Controller (sprung on me in March) and am supposed to oversee that all this GDPR is adhered to I presume. The LA has two DPOs one who works Mon-Wed and the other Thu-Fri and each time I call I get told they are in court, at a meeting or just not in today and could I email. If I email, I'm lucky to get a response the same day in fact their automatic response says the words 'we aim to respond to your query with 48 hours'. No good if you're writing an AUP to be passed the same day! Would be good if anyone on here could post their Data Mapping Tool though. The GDPR website is good and does explain the terms in detail but it's which terms to use and when. All the best

Am I the only one here who receives little support from the head, SLT or key staff members regarding GDPR. I am the Director of IT (roles include, network manager and some business manager roles) with one techie. We have purchased our LA DPO service costing £1000 where all we seem to get are emails with bulletins and tasks to do before the 25th May. One of these many tasks is the massive job of data mapping - I've been adding data to this on and off for nearly 3 weeks now. Anyway - I asked for a meeting with a governor, head, an SLT member and a member of safeguarding as recommended by a GDPR trainer a month ago. The only staff who turned up were the head and safeguarding lead and I was given 15 minutes of their time and didn't feel any further forward really. The purpose of the meeting was to discus GDPR and what needed to be done - like changing policies, staff handbook, privacy notices and go through some of the data mapping. We touched on Policies and that was it. I have had to email the head with MY example of a privacy notice to go on our website for him to check and send back with a yes or no. I am trying to get this GDPR sorted with a mountain of paper work to read through at the same time as making sure the network is running smoothly etc etc. What do you recommend I do? Please help!