GDPR in a Nutshell | Optimus Education

Introduction

This course will provide you with an overview and supporting resources regarding GDPR legislation.

The General Data Protection Regulation (GDPR) came into effect on 25 May 2018, replacing the Data Protection Act (DPA). The GDPR significantly changes the way every school collects, manages and stores data in school and failure to comply will result in large fines.

This training course will ensure all school staff are equipped with the essential knowledge and information about what the GDPR means to them as individuals, and what whole-school changes need to be implemented.

Units 3 and 4 of the course provide the school leadership team with valuable practical resources to ensure every school is GPDR-compliant.

Aims and outcomes

Learn about data protection and the GDPR and the key changes that have come into effect since 25 May 2018.
Understand what the GDPR means for your school and the effect it will have on school policies, processes and culture.
Appreciate the benefits of a single compliance document as an essential tool to take you through the necessary practical steps to becoming GDPR-compliant.
Learn about the role of a data protection officer (DPO) and guidance on appointing a DPO in your school.

Course content

Unit 1: An introduction to data protection and GDPR

Continue
- Step 1: Brief introduction to the Data Protection Act
- Step 2: Data protection in schools
- Step 3: Personal data in schools (suggested answers)
- Step 4: The eight principles of the Data Protection Act
- Step 5: What is the GDPR?
- Step 6: Key differences between the Data Protection Act (DPA) and the General Data Protection Regulations (GDPR)
- Step 7: Summary and reflection
- End of Unit 1 quiz
Unit 2: The GDPR in practice

Continue
- Step 1: Personal data in schools
- Step 2: School culture and ethos
- Step 3: Legal basis for processing personal data
- Step 4: The GDPR and individual rights
- Step 5: Data protection impact assessments
- Step 6: Summary and reflection
- End of Unit 2 quiz
Unit 3: GDPR readiness

Continue
- Step 1: Benefits of a single compliance document
- Step 2: Questionnaire
- Step 3: Retention schedule
- Step 4: Information audit
- Step 5: Staff training
- Step 6: Privacy notices
- Step 7: Subject access requirements
- Step 8: Summary
- End of Unit 3 quiz
Unit 4: Data Protection Officer

Continue
- Step 1: Data controller or data processor?
- Step 2: Data protection officers?
- Step 3: Appointing a data protection officer
- Step 4: Moving forward
- Step 5: Summary
- End of Unit 4 quiz

Author

Caroline Collins

Caroline is the Head of School Business Strategy and Resources at Miles Coverdale Primary School in London.