Skip to main content
Facilities

Property and Facilities Management

people

Professional Support Services

education

Education and skills

.
Right Arrow

All Services

Data Protection/GDPR Services

veritau logo

Information Governance Services for schools: Data Protection and GDPR

The General Data Protection Regulation (GDPR) and new Data Protection Act came into force in May 2018 and resulted in significant changes to the rules on data protection.  There is now the possibility of significant fines for organisations which fail to protect personal data. All organisations therefore need to ensure their arrangements for processing personal data comply with the new legislation. Public authorities including schools also need to appoint a Data Protection Officer. Is your school complying with the new rules?

 

A single 90-minute training session will cover the key elements of the new legislation. 

Topics to be covered include:

  • Data processing contracts
  • Data breaches and self-reporting
  • Data Protection Officer – legal obligations
  • Subject Access Requests – reduced time requirement
  • Revised guidance on consent
  • Pupils and parents – capacity and age
  • Privacy by design and DP Impact Assessment
  • Rights of portability, rectification and erasure

 

 

Support to schools to ensure compliance with the new Data Protection Act and GDPR.  This can include the preparation and update of information asset registers, the review of contracts, support to respond to complex subject access requests and participation in projects which involve changes to data processing.

An annual contract that ensures that you are fully supported for Data protection regulations and have access to experts throughout the year when these are needed. Provided is a vast range of knowledge articles and resources to access any time online so there is always a guide available.

The annual support contract will include:

  • Telephone advice -  8.30am to 4.30pm Monday to Friday
  • Regular newsletters and access to online guidance and knowledge base
  • Provision of standard templates (for e.g. policies, privacy notices, information asset registers)
  • Data Protection Officer (including all mandatory duties plus annual report to governors)
  • Correspondence and liaison with the ICO
  • Two free training places on GDPR training courses per year
  • Up to ten hours of subject access and Freedom of Information Act requests
  • Up to ten hours of Information Asset Register maintenance / records management 

 

 

A single 90-minute training session will cover the key elements of the new legislation. 

Topics to be covered include:

  • Data processing contracts
  • Data breaches and self-reporting
  • Data Protection Officer – legal obligations
  • Subject Access Requests – reduced time requirement
  • Revised guidance on consent
  • Pupils and parents – capacity and age
  • Privacy by design and DP Impact Assessment
  • Rights of portability, rectification and erasure

 

 

Support to schools to ensure compliance with the new Data Protection Act and GDPR.  This can include the preparation and update of information asset registers, the review of contracts, support to respond to complex subject access requests and participation in projects which involve changes to data processing.

An annual contract that ensures that you are fully supported for Data protection regulations and have access to experts throughout the year when these are needed. Provided is a vast range of knowledge articles and resources to access any time online so there is always a guide available.

The annual support contract will include:

  • Telephone advice -  8.30am to 4.30pm Monday to Friday
  • Regular newsletters and access to online guidance and knowledge base
  • Provision of standard templates (for e.g. policies, privacy notices, information asset registers)
  • Data Protection Officer (including all mandatory duties plus annual report to governors)
  • Correspondence and liaison with the ICO
  • Two free training places on GDPR training courses per year
  • Up to ten hours of subject access and Freedom of Information Act requests
  • Up to ten hours of Information Asset Register maintenance / records management 

 

 

Interested in Data Protection/GDPR Services?

Let us know your details and one of our Relationship Managers will be in touch with some more information: nyes@northyorks.gov.uk