Management Information Sheet

General Data Protection Regulation (GDPR) applying from 25th May 2018

MI Sheet TypeInformation
MI Number:105/17
Publication Date:14/07/2017 12:00:00
LA Contact:ICT Service 4 Education (0845 303 3003)
Audience:Headteachers/Governors/Data Managers/All Staff
Links:https://ico.org.uk/media/1624219/preparing-for-the-gdpr-12-steps.pdf

General Data Protection Regulation (GDPR) applying from 25th May 2018

The GDPR (General Data Protection Regulation) will apply in the UK from 25th May 2018, changing the way schools manage and look after data and information; from paper in filing cabinets, through to the retention of student/staff records to monitoring day-to-day activities and security.

It is important that schools are aware of the changes and start planning their approach to GDPR compliance. Failure to comply with GDPR could see large fines issued for your school data controller.

GDPR is a complete change to current data protection and:

  • Strengthens & unifies data management
  • Makes it mandatory to report data breaches within 72 hours
  • 3rd party data processors must be GDPR compliant
  • Mandates need for formal contract and/or SLA
  • Issue fines for non-compliance up to 20 million Euro's or 4% of global turnover
  • Gives control to individuals

The Information Commissioner Office (ICO) has issued "Preparing for GDPR - 12 Steps to take now" document which is included as part of this MI Sheet.

What are ICT Services 4 Education doing to support you through this change:

During the Autumn term we will be arranging awareness sessions for schools and Academies. Details will be available early September and there will be a charge to attend these sessions.

We are working with a Supplier to provide a GDPR compliance portal service for schools to demonstrate compliance. This will be an optional service available as part of our portfolio.

We are working with all our Suppliers to ensure they will be GDPR compliant by May 2018 so we can provide you with this information.

Any queries please contact ICT Services 4 Education on 0845 303 3003 or email ict@norfolk.gov.uk