Thanks for this - just when I think I'm getting a handle on things it seems to snowball. Do we therefore need to get contracts in place with all our suppliers eg MIS, school photographer jumps out as those that would be important, but there's also so many websites that we sign up for use in one subject or another. Some of them say they are GDPR compliant but do we need to have some kind of written contract? I'm thinking about everything from kahoot, quizlet, dofe, ucas and then the small companies who are just used for one subject. What do we actually NEED in writing?
Thanks!