The new European General Data Protection Regulation (GDPR) law will come into effect on 25 May 2018. The aim of this law is to ensure all personal data relating to living EU citizens (including the UK) is protected and the companies who work with such data are held accountable for its protection.
At Strictly Education we have always been committed to data privacy and protection. However, to ensure we are operating at the highest standards we have taken several additional steps for GDPR compliance. As a business with data collection at the core of many of our services, safeguarding personal data is of the utmost importance to us.
GDPR compliance has been driven at Board-level and our main areas of focus and actions we have taken in preparation for GDPR are:
Personal data review
Reviewed all existing data policies and procedures to make sure they adhere to new legislation and uphold the highest standards of privacy and protection of personal rights
Audited all data held and processed in the business, to confirm and record - Nature and purpose of processing - Categories of data subject - Types of personal data held and processed
Identified the lawful basis for all our personal data processing
Re-written our privacy policies to align with GDPR guidelines
Reviewed all our procedures to align with the individual’s rights as specified under GDPR
Updated our subject access request procedure to manage requests for data
Processes, clients and employees of Strictly Education
Reviewed our existing processes that cover data breach reporting and made necessary adjustments to accommodate GDPR rules.
Implemented the necessary Data Protection Impact Assessments for projects that may involve high risk processing as covered under GDPR.
Implemented a new addendum to contracts with existing clients to ensure all parties take account of their respective obligations under GDPR.
Trained all staff on the new legislation to complement their existing training on data protection.
Page updated 4th May 2018
Click here to read the previous statement, published 7th March 2018.