Patching policy implemented Firewalls and anti-virus current and up to date Encryption of storage media Organisational measures – Secure premises including server rooms and physical storage Security and data protection policies, processes and training Application of retention schedule Processing purpose Categories of Categories of personal Recipients (inc. third Transfers to a third Retention period Organisational data subjects data countries or country or international (given where and technical international organisation practicable o/w security …… organisations) (Article 49 (1)) see SQA measures …. retention (Article 32 (1)) schedule) Certification of Candidates Personal details Candidates N/A Permanent As above candidates (schools) (schools) Scottish Candidate Centres Number (SCN) Local authorities – Centre details Director of Education Attainment details Scottish Council of Independent Schools (SCIS) UCAS Scottish Government Education – Analytical Services Division Certification of Candidates Personal details Candidates Only where the Permanent As above candidates Scottish Candidate Centres candidate resides (colleges/training providers) Number (SCN) Skills Development outside of the EEA providers) Centre details Scotland (SDS) Attainment details UCAS
Patching policy implemented Firewalls and anti-virus current and up to date Encryption of storage media Organisational measures – Secure premises including server rooms and physical storage Security and data protection policies, processes and training Application of retention schedule Processing purpose Categories of data subjects Categories of personal data Recipients (inc. third countries or international organisations) Transfers to a third country or international organisation …… (Article 49 (1)) Retention period (given where practicable o/w see SQA retention schedule) Organisational and technical security measures …. (Article 32 (1)) Certification of candidates (schools) Candidates (schools) Personal details Scottish Candidate Number (SCN) Centre details Attainment details Candidates Centres Local authorities – Director of Education Scottish Council of Independent Schools (SCIS) UCAS Scottish Government – Education Analytical Services Division N/A Permanent As above Certification of candidates (colleges/training providers) Candidates providers) Personal details Scottish Candidate Number (SCN) Centre details Attainment details Candidates Centres Skills Development Scotland (SDS) UCAS Only where the candidate resides outside of the EEA Permanent As above
RecordOfProcessingActivities.docx