GDPR
From 25 May 2018 the law around data protection has changed.
The old Data Protection Act (1998) will be replaced by the new Data Protection Act (2018), which includes the European General Data Protection Regulation and the new European Crime Directive. This will have significant consequences for schools and other organisations. The guide below from the ICO gives you 12 steps to complete to get ready for GDPR.
Preparing for the General Data Protection Regulation (GDPR) - 12 steps to take now
https://ico.org.uk/media/for-organisations/documents/1624219/preparing-for-the-gdpr-12-steps.pdf
source: ICO
The GDPR Preparation Pack
The GDPR Preparation Pack is also available for schools who have have purchased package ELI007/F from Support Services for Education (SSE).
The Pack contains: model privacy notices, model Data Protection Policy, Data Mapping, Data Asset Audit document, Privacy Impact Assessment document, Data Protection Policy, Subject Access Record document and Data Exchange Documents.. They are supplied in Word format and should be changed to suit the school.Visit the SSE website for further details.