Preparing for the new GDPR Regulations


The General Data Protection Regulations are due to come into effect on 25th May 2018.

The GDRP will replace the current Data Protection Act and represents the most significant change to data protection law for 20 years. These changes apply to all organisations holding or processing data – including all schools and academies.

Many of the principles underpinning the GDPR changes are similar to those of the Data Protection Act so if your school is compliant with the current requirements much of your approach to compliance is likely to remain similar.  However, there are new elements which schools will need to be aware of regarding the accountability of employers, changes to certain current practices and the potential penalties which may be levied against organisations.

Full guidance on the implementation of the changes is yet to be published, however the Information Commissioners’ Office has published 12 Steps organisation can take to prepare for the changes.  This guidance can be accessed here;

KCC’s Information Governance Team have a dedicated web page on Kelsi to support schools in preparing for the GDPR changes.  This page includes template documents which schools may wish to adapt and adopt.  The page will be updated as further guidance is made available by the ICO.  This can be accessed here;

The Information Governance Team is also able to provide advice to  Schools and Academies on these changes.

We will be hosting a series of webinars ahead of the changes to aid schools in preparing for and implementing GDPR. Please keep an eye out for further information.