GDPRiS for Schools
Manage 3rd party suppliers that process data
Streamline SARs & data breach reporting
Store policy documents, training records & materials
Provide a Self-Assessment Questionnaire (SAQ) to all staff to ensure full accountability
Access practical guidance on GDPR compliance
Supply & store SAQs in other areas i.e. networks, access control
Don’t let your School hit the headlines!
In 2016 there were 2,168 data breaches reported to the ICO – only 166 were in education. With the new regulations making reporting mandatory and with increased responsibilities, this figure looks set to rise if schools fail to prepare for GDPR.
A County Council was fined £60,000
They accidentally sent old files to a charity shop in a filing cabinet they were donating!
Greater Manchester Police were fined £150,000
They posted 3 DVD’s containing interview footage – the DVD’s were lost in the post!
GP Practice fined £40,000
Careless gossip! Details about a patient were disclosed to her estranged ex-partner.
GDPRiS for Data Protection Officers
Centrally manage GDPR across single or multiple schools
Prompt good practice surrounding data protection
Demonstrate commitment to manage data sensitively & ethically
React quickly to SARs & data breaches
Build a framework to encourage a culture of privacy
Advocate accountability
GDPRiS & school suppliers
Supplier product directory
Suppliers maintain a specification of data that they use from the MIS and other sources, forming the GDPRiS supplier product directory.
Supplier compliance
GDPRiS will allow school suppliers to demonstrate their own GDPR compliance through data mapping of their products and by providing the necessary documentation.