UKGDPR for education

As a public body or authority you are required to nominate a Data Protection Officer. Many education establishments have nominated someone internally that is running this alongside their day job.

Data Protection in education can be a full time job in itself and expert assistance is required to ensure your organisation does fall foul of the law.

There are a number of areas education establishment must concentrate on to ensure they have a robust privacy management system in place, they are as follows:

• Assess the data processing activities that occur in your organisation, documents them; and
• Check you general data safety and security this is both from a physical security perspective and electronic; and
• Document processes to assist with your compliance which includes processing and storage of student, pupil records, staff and suppliers or visitors, information used under the Freedom of Information Act 2000; and
• Being open and transparent about processing, storing and sharing data; and
• Being aware and having mechanisms in place for any letting activities we undertake, or is our organisations gym or swimming pool facilities open to the public;
• Having accountability and governance in place which is embedded from Trustee, Governor or councillor to teaching and support staff alike; and
• Having mechanisms in place for data subject to exercise their rights including access to educational records and any data relating to the Freedom of Information Act 2000
• Audit and review mechanisms do we keep everything up to date and review it annually to ensure we only keep store and process data that we are required to by law; and
• How does all the above connected with other processes or procedures that we may need to consider on our data protection journey.
  
  

We at Keeffe and Associates Ltd have helped 70 educational establishments with their privacy management system and ongoing support.

If you would like to have a discussion about your organisations privacy management system or having any queries about our Data Protection Officer service then do not hesitate to contact us.   We also, give some useful snippets of information in our newsletter so feel free to sign up today.