Data Protection Services

Our DPO as a Service package offers complete piece of mind. Offering access to a team of specialist Data Protection Officers, experts in the education sector who will provide hands on support and guidance on compliance.

This service includes:

• access to our Helpline
• advice on Subject Access Requests and Privacy Impact Assessments
• access to our GDPR Toolkit of policies and templates
• a GDPR Compliance Review
• full Staff Training in the first year
• liaison with the ICO and Data Subjects

Our comprehensive GDPR Compliance Review assesses your school’s procedures, systems, records and activities in order to:

• ensure that appropriate policies and procedures are in place.
• verify those policies and procedures are being followed
• test the adequacy of policies and procedures in place
• recommend any adjustments that need to be made in policy and procedures.

We will focus on the key compliance areas of:

• HR and Codes of Conduct
• IT and Data Security
• Governance
• Data Maps
• Data disposal
• Suppliers & Data Sharing
• Subject Requests and Data breaches
• Visits, trips and consent
• Site and physical controls

Upon completion of the audit you will receive an executive summary which will highlight areas of compliance with the DPA 2018 and UK GDPR and areas where work needs to be undertaken to become compliant. The report includes a prioritised action plan, detailing the areas requiring attention and recommendations for remediation.

Our helpline service is suitable for schools with an in – house DPO and offers practical advice, support and guidance on becoming – and remaining – compliant with the requirements of GDPR and data protection legislation. The service also includes access to our GDPR Toolkit of policies and templates.

The GDPRiS compliance management platform is an online portal for schools to manage all areas of data protection compliance. Our Data Protection Officers use GDPRiS to deliver our Data Protection Offcer service because it is designed specifically to meet the needs of education settings when managing data protection. GDPRiS provides a whole-setting approach to data protection, simplifies processes and provides evidence-based accountability.

Key features include:

• Comprehensive supplier data mapping tools
• Data breach recording / reporting
• Subject Access Request recording / reporting
• Training and policy document storage
• Self-assessment questionnaires for staff
• Compliance audit trails

The GDPRiS platform is available to purchase from us at preferential rates, whether or not you subscribe to our other services.

Subject Access Requests are becoming increasingly common and it is vital that you are prepared to respond properly. Our SAR support service provides advice and guidance in the management of a Subject Access Request. We can also support with:

• advice on auditing and locating records
• redaction
• liaison with requestors and partner agencies (including local authority teams such as Children’s Services, Human Resources, SEND)
• liaison with the Information Commissioner’s Office (ICO)

Our GDPR Toolkit is a comprehensive Data Protection Framework Policy Suite, written by solicitors alongside our expert team of education data specialists and is bespoke to the unique needs of schools and academies.

(We also have a framework suitable for Multi Academy Trusts. Please get in touch to discuss your requirements.)

It includes:

• Data Protection Policy
  • Annex 1: Legal Conditions for Processing
  • Annex 2: Breach Procedure
  • Annex 3: Data Protection Impact Assessment Procedure
  • Annex 4: Subject Access Request Procedure
  • Annex 5: Freedom of Information Request Procedure
• Privacy Notice (Pupils)
• Privacy Notice (Workforce)
• Retention Schedule
• Social Media Policy
• Bring Your Own Device (BYOD) Policy
• ICT Acceptable Use Policy
• Off Site Working Policy
• CCTV Policy
• Privacy Notice (Governors)
• Special Category Data Policy
• Protection of Biometric Information Policy
• Remote Learning Policy

For help in understanding how to adopt these policies, purchasers can attend our Contextualising Policies Data Protection Bitesize training course.

To purchase the Policy Suite or discuss your needs with us in more detail, click here.

We have a wide range of Data Protection Impact Assessment (DPIA) templates, covering the full range of situations and suppliers that may require one.

Our team can offer you advice and guidance in assessing the need for a DPIA, and in completing the DPIA templates to account for your unique circumstances.

If you would like advice or assistance with a DPIA, or would like to purchase one of our templates, please use the button below to get in touch.