No one’s ready for GDPR
I have been helping a school who I do IT work for with their GDPR roll out - not because it is my area of expertise but because they had nobody else to turn to and the Local Authority who control the school have released zero guidance in preparation.<p>There are many, many unresolved issues:<p>We are supposed to employ a &#x27;data officer&#x27; this basically cannot be anyone who works in the school at present. We sought volunteers but didn&#x27;t get a single applicant. It is difficult to justify paying someone to do it (if you can find a qualified person) - the budget for things like school books is already paper thin.<p>I contact external suppliers who use our data and receive a wall of silence.<p>Things like publicly visible visitors books are outlawed (depending on how you read guidance), the alternative are electronic systems - more cost.<p>Displaying certain sensitive information, prescriptions for pupils, are now outlawed, this could compromise safety.<p>There seems to be a raft of GDPR training systems which are basically a single page questionnaire, costing upwards of £300.<p>I don&#x27;t have an issue with what the legislation is trying to do it just seems so vaguely implemented. Basically we all know that the organisations who need to clean up their act will be doing the least to comply.