Please find attached the briefing paper from LSP Working Together Autumn 2017 (on page 25), which sets out the twelve steps that organisations can start to take to ensure they are ready to comply with the EU General Data Protection Regulation (GDPR), which comes into force on 25 May 2018.
NB. Privacy Notice Model Documents - the DfE has recently published model privacy notices for schools and Local Authorities to issue to staff, parents and pupils about how schools process data and how personal data about oneself can be accessed.
Schools and LAs can use and amend these example privacy notices to suit their local needs and circumstances. Privacy notices can be issued in a number of ways: as part of a school brochure or induction pack, or in a school diary; on the school notice board; as part of a staff contract or induction pack; on the staff notice board; or on the school or LA website.