2. Record of Processing Activity

The GDPR requires that a school must have a record of processing activities. This sounds like a difficult task but our pre-populated template should have you 90% of the way there.

Template documentation is included in the full GDPR pack for those who choose to purchase it.

The GDPR requires that a school must have a record of its processing activities. This sounds like a difficult task but our pre-populated template should have you 90% of the way there.

So what is a record of processing activities? Basically it is a list of the types of data that you collect from pupils, parents, staff and other individuals. Then you need to answer a series of questions about what you use the data for, what is the legal basis, how long you plan to keep it, how you keep it secure and who do you share the data with.

A lot of the personal data that a school collects is about its pupils. The data ranges from the pupils name, all the way through their school career up until their final day at the school.

A school will also hold data about its staff, both current and former. The types of staff personal data must be listed in the record of processing activity. Again our template has prefilled most of the common fields that a school will hold.

There is an exemption to complete this record of processing for organisations employing less than 250 people. However this exemption is not available to schools due to the nature of the data being processed.

Previous Tutorial Next Tutorial

£395.00Add to cart

Home

View

1. Mobilisation & Awareness

View

3. Lawful Basis for Processing

View

4. Consent

View

5. Children

View

6. Communicating Privacy Information

View

7. Rights of the Individual

View

8. Breaches

View

9. Design & Default

View

10. DPO

View

11. Training

View

12. Sharing of Data

View

What's in the Schools GDPR pack?

Find out how Schools GDPR helps you