Section 2 – Informing candidates of the information held Prince Henry’s High School ensures that candidates are fully aware of the information and data held. All candidates are: informed via the student handbook issued yearly and on admission to the school given access to this policy via the Exams section of the school’s website. Candidates are made aware of the above via their candidate handbook and Exams assembly. At this point, the centre also brings to the attention of candidates the annually updated JCQ document Information for candidates – Privacy Notice which explains how the JCQ awarding bodies process their personal data in accordance with the DPA 2018 and GDPR. Section 3 – Hardware and software The table below confirms how IT hardware, software and access to online systems is protected in line with DPA 2018 & GDPR requirements. Hardware Protection measures Desk top computer Individual password protection Laptop Trend Micro anti-virus used to protect all electrical iPads Software/online system Protection measure(s) Sims protected usernames and passwords; rules for password setting (use of a mix of upper/lower cases letters and A2C numbers); users should regularly update passwords; centre administrator has to approve the creation of new user accounts and determine access rights; regular checks to Firewall/Antivirus software are carried out. Section 4 – Dealing with data breaches Although data is handled in line with DPA/GDPR regulations, a data breach may occur for any of the following reasons: loss or theft of data or equipment on which data is stored inappropriate access controls allowing unauthorised use equipment failure human error unforeseen circumstances such as a fire or flood
Section 2 – Informing candidates of the information held Prince Henry’s High School ensures that candidates are fully aware of the information and data held. All candidates are: informed via the student handbook issued yearly and on admission to the school given access to this policy via the Exams section of the school’s website. Candidates are made aware of the above via their candidate handbook and Exams assembly. At this point, the centre also brings to the attention of candidates the annually updated JCQ document Information for candidates – Privacy Notice which explains how the JCQ awarding bodies process their personal data in accordance with the DPA 2018 and GDPR. Section 3 – Hardware and software The table below confirms how IT hardware, software and access to online systems is protected in line with DPA 2018 & GDPR requirements. Hardware Protection measures Desk top computer Laptop iPads Individual password protection Trend Micro anti-virus used to protect all electrical Software/online system Protection measure(s) Sims A2C protected usernames and passwords; rules for password setting (use of a mix of upper/lower cases letters and numbers); users should regularly update passwords; centre administrator has to approve the creation of new user accounts and determine access rights; regular checks to Firewall/Antivirus software are carried out. Section 4 – Dealing with data breaches Although data is handled in line with DPA/GDPR regulations, a data breach may occur for any of the following reasons: loss or theft of data or equipment on which data is stored inappropriate access controls allowing unauthorised use equipment failure human error unforeseen circumstances such as a fire or flood
12.-Prince-Henrys-GDPR-policy-exams-2018-19.docx