These are the GDPR resources currently available. Please click on the heading you are interested in to access these resources.
Our Toolkit Tools resources have been specifically tailored to your subscription, if you encounter any issues with these resources please let us know via our contact form.
Please note, you need to have an active Toolkit subscription in order to view and download the resources.
General Data Protection Regulation Compliance Resources
This data destruction log template provides a way of recording physical or electronic records that you have securely disposed of, plus provides a means of documenting hardware disposals too.
A questionnaire that could be used with staff to identify what data they are processing and how that can feed through into the school's data flow map.
This template checklist is designed to be completed by the school/academy as the data controller to ensure data processor contracts comply with the requirements of the GDPR.
This template contains suggested wording to give pupils and parents an insight into how information about pupils is used in online streaming and recording of lessons. It is in addition to the Privacy Notice for Pupils.
A template policy for the introduction of a biometric system within the school setting and a consent form for parents to agree to the use of biometric data.
A document that can be used to detail why particular documents have been included/excluded within the school's SAR response (for internal purposes only)
This template induction pack provides you with a framework that can be used for when a short term member of staff joins the school to ensure they have all the information they need to know about the school in a simple document.
A website privacy statement/notice explains what information you collect from visitors to your website. If you collect any sort of data at all then you will need to publish a website privacy notice or statement. Schools can choose to use either the statement or the privacy notice or could use both. Each document will need to be personalised to reflect the data that is collected and processed from your website.