​​​​​​​​​​​​​​​​Somerset eLIM support schools to make sense of their statutory duties under the General Data Protection Regulation (GDPR) and Data Protection Act 2018.

We are experienced Data Protection advisors and understand the complexities of legislation and how it affects education settings. We provide you with the support, advice, training and documentation you need to ensure your school is compliant and able to respond effectively to data breaches, Subject Access Requests and Freedom of Information requests. We help you uphold the rights of data subjects while avoiding reputational damage and minimising management time required

When necessary, we co-ordinate our support with SSE HR Advisory Services, Governance Services, Somerset Schools IT Services, and the Somerset Information Governance ​and Records Management teams.

We provide a Data Protection Officer (DPO) package to schools, and additional resources to schools who have already procured a DPO. Contact us at dposchools@somerset.gov.uk 

(Please note that resources and materials that were previously open to all schools will now be available to eLIM DPO subscribers only, and the DPO can only provide phone, email, newsletters, audits and practical support to schools who buy into the service.)

Resources for schools

We provide a full toolkit of resources for subscribing schools, including template policies, privacy notices, privacy impact assessments, sample letters, monitoring documents and much more.

All our resources for subscribing schools are available on the Support Services for Education website here (requires SSE login): www.supportservicesforeducation.co.uk/p14603

Want access to the resources? Contact us at dposchools@somerset.gov.uk 


Free resources

Sign up for our free monthly newsletter: latest news, case studies, tips and advice for schools http://bit.ly/eLIMDataProtectionNewsletter ​​

eLIM Images Consent form 2019 (based on IRMS)

eLIM review of personal data for Governors (thanks to South Petherton Jr School)

Information Commissioner's Office - for Education

DfE Data Protection Toolkit for Schools 

DfE guidance on parental responsibility​​​

NSPCC Child Protection record keeping

​​Data Protection Officer service

Our Data Protection Officer Service supports schools and Multi Academy Trusts (MATs) to comply with the requirement to appoint a DPO​ with the responsibilities set out in Article 39 of the GDPR.

Our DPO service includes:

  • Telephone and email advice to schools and MAT leaders

  • Annual online GDPR compliance check with report for governors (in-school visit also available)

  • Management of Subject Access Requests and requests under the Freedom of Information Act, working with your staff and providing all documentation, advice on redaction and correspondence with data subjects

  • Crisis support to manage data breaches including assessing the risk to the data subject, completing records, and communicating with affected individuals and the Information Commissioner's Office if required

  • Support to create and maintain data records including data mapping and data asset audit

  • Template policies and advice on systems, security and procedures

  • Training materials for employees (in-school training also available)

  • Acting as the first point of contact for parents, legal representatives and the Information Commissioner's Office

Prices start at £175 per year for Somerset primary schools.  Discounts are available for MATs. Non-Somerset schools can contact us for a quote at dposchools@somerset.gov.uk  

Visit our SSE service page here http://www.supportservicesforeducation.co.uk/Services/5254#  

NEW GDPR Healthcheck

Dealing with potential data breaches and/or complaints from data subjects are time consuming and stressful ​for schools. In extreme circumstances they could lead to a possible investigation by the Information Commissioner's Office and cause reputational damage to the school or MAT.

Our GDPR health check has been designed to help schools and MATs ensure policies and processes for data management and security reflect best practice and are compliant with the law. During a two-hour in-school visit, we will give you a full healthcheck and written report with recommended actions and how to achieve them.

Schools subscribing to our DPO service can request an in-school healthcheck for £75.

Non-subscribing Somerset schools can request a healthcheck - prices start at £95 for a two-hour visit plus written report.

Contact us at dposchools@somerset.gov.uk