sharing personal data with an external data processor version 1 与外部数据处理器版本1个人共享数据

《sharing personal data with an external data processor version 1 与外部数据处理器版本1个人共享数据》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、Title:SharingPersonalDatawithanExternalDataProcessorPurpose:GuidanceforSchoolsoncomplyingwiththeirdataprotectionresponsibilitieswhenusinganexternalthirdpartytohelpdeliveraserviceAudience:SchoolPrincipalsandBoardsofGovernorsThisdocumentisintendedtoactasa

2、generalguideforSchools.ItshouldnotbetakenasanabsolutestatementofthelawandobligationscoveredbytheDataProtectionAct1998.ItisacriminaloffencetobreakanyconditionsoftheAct.18Version:1.0DocumentControlVersion:1.0Date:25November2011Author(s):WELB/SELB/C2kDistr

3、ibution:SchoolswithinSELB/WELBareaNextReviewDate:3yearsfromdateofissue18Version:1.0PURPOSEThepurposeofthisguidanceistoprovidedataprotectionadvicetoSchoolscoveringsituationswhereaSchoolemploysathirdpartytohelptheSchoolprovideaserviceinvolvingaccesstopers

4、onaldata.TheguidancehasthreeParts:·Part1isintendedtoinformSchoolsoftheirresponsibilitiesundertheDataProtectionAct1989(theAct)inthecontextofsharingdatawithathirdparty.·Part2providesadviceonthetechnicalstandardsandcontrolsthatmustbeconsideredbeforeallowin

5、gathirdpartyaccesstoSchooldata.·Part3oftheguidanceisintheformofaModelQuestionnairewhichSchoolscanadaptanduseasameansofobtainingandrecordingtherequiredassurances.PART1DATAPROTECTIONGUIDANCE1.1BackgroundSchoolsareDataControllersundertheAct,astheydetermine

6、howandwhypersonaldataiscollected.Schoolsareresponsibleforensuringthatsuchdataisheldsecurelyandthataccesstoitismanaged.Often,Schoolsareadoptingnewtechnologiestodeliverservices,communicatewithparentsandhelpteacherscollaborate.Schoolsmusthoweverneverlosesi

7、ghtoftheirresponsibilitiesasDataControllersundertheAct.1.2ExamplesofexternaldataprocessingListedbelowaresomeexampleswhereathirdpartymightbeemployedbyaSchooltohelpdeliveraservice:18Version:1.0·Contactbytextore-mailingservices·Attendance/behaviourmanageme

8、ntreporting·Cashlesscateringsystems·Virtuallearningenvironmentsoronlineassessmentenvironments1.3UnderstandingrelationshipsItistheSchool’sresponsibilityasDataControllertodecidethelevelofaccesstograntwhensharingdatawithanexternalth