the Prevent Duty) and any concerns about sexual abuse including Female Genital Mutilation must be reported without informing parents. See: GDPR - Information Sharing Guidance and GDPR Resources Information – sharing advice for safeguarding practitioners & Consent under GDPR & Example Data Audit: . Should personal data be limited to what is necessary? An audit of all data collected must be carried out and any duplicated information or information not required to fulfil the role as a childcare provider should be removed. See: GDPR Information Sharing Guidance Example Data Audit & GDPR 6 – – Privacy Principles: How does the data remain accurate? Parents should be regularly asked to update the information held. Should information about data storage be shared with parents? Parents should be informed how long data will be stored and how it will be destroyed when no longer required as evidence for Ofsted, HMRC or insurance purposes See: GDPR Record and Retention Information: – How is data protected /secure? Inform parents of the security measures in place e.g Computer for example, password protection and virus protection are both – used. Paper for example, locks on cupboards where written data is stored or an – alarm on the house How data is transported: GDPR Information Sharing Guidance Data – – Transporting Policy: How do we inform parents about data protection? From May 2018 a written Privacy Notice will be needed. See: GDPR Information Sharing Guidance 6 Privacy Principles & Privacy – –GDPR Notice Suggested Text for Pupils:
the Prevent Duty) and any concerns about sexual abuse including Female Genital Mutilation must be reported without informing parents. See: GDPR - Information Sharing Guidance and GDPR Resources – Information sharing advice for safeguarding practitioners & Consent under GDPR & Example Data Audit: . Should personal data be limited to what is necessary? An audit of all data collected must be carried out and any duplicated information or information not required to fulfil the role as a childcare provider should be removed. See: GDPR – Information Sharing Guidance – Example Data Audit & GDPR 6 Privacy Principles: How does the data remain accurate? Parents should be regularly asked to update the information held. Should information about data storage be shared with parents? Parents should be informed how long data will be stored and how it will be destroyed when no longer required as evidence for Ofsted, HMRC or insurance purposes See: GDPR – Record and Retention Information: How is data protected /secure? Inform parents of the security measures in place e.g Computer – for example, password protection and virus protection are both used. Paper – for example, locks on cupboards where written data is stored or an alarm on the house How data is transported: GDPR – Information Sharing Guidance – Data Transporting Policy: How do we inform parents about data protection? From May 2018 a written Privacy Notice will be needed. See: GDPR – Information Sharing Guidance –GDPR 6 Privacy Principles & Privacy Notice Suggested Text for Pupils:
GDPR%20FAQS.docx