CONTACT US

GDPR COMPLIANCE MADE
EASY FOR SCHOOLS

INTRODUCING OUR GDPR IN SCHOOLS (GDPRiS) SOLUTION

 
  

 

down-arrow

INTRODUCING GDPRIS

GDPR in Schools (GDPRiS) is the UK's leading tool for complete GDPR management in schools. Our partnership with LGfL enables us to offer the GDPRiS platform from as little as £50 per school, per annum.

GDPRiS-1
Bett2018
LGFL

GDPRiS from Groupcall helps schools answer the following 4 key questions around personal data for GDPR:

1

WHERE IS IT?

GDPRiS documents the data flows and all of the places you store and process school data. It records whether data is in school or with 3rd party suppliers.

2

WHY WE HAVE IT?

GDPRiS logs the reasons for using the data, the legal basis for processing it and how the rights of the individual are protected. Data stored that has no value will be highlighted.

3

HOW IS IT PROTECTED?

GDPRiS records the processes you and your 3rd party suppliers use to protect personal data. It helps guide ALL school staff to a new level of data protection understanding.

4

CAN WE PROVE IT?

As well as enabling you to easily conduct internal audits and report on data breaches, all the evidence you need to demonstrate your compliance is in one place.

GET A QUOTE OR ORDER GDPRIS
down-arrow


GDPRIS FEATURES AND BENEFITS


TOTAL CLARITY

If not managed properly, GDPR can be very complex. GDPRiS helps schools in manageable steps, with access to practical guidance on GDPR compliance.



SIMPLE INTERFACE

GDPRiS is easy to use to provide simple and intuitive data protection management, enabling schools to streamline subject access requests (SARs) and data breach reporting.


SUPPLIER MAPPING

Through GDPRiS, you can easily manage all 3rd party suppliers that process your school data, ensuring that they are demonstrating their own GDPR compliance. GDPRiS currently maps over 800 leading EdTech suppliers (and counting!) to save you the time and effort manually mapping your suppliers.



ACCOUNTABILITY

GDPRiS provides evidence-based accountability and peace of mind, including a self-assessment questionnaire (SAQ) to all members of staff to ensure full accountability.


ALL IN ONE PLACE

GDPRiS allows you to store policy documents, training records and materials all in one place, with all staff members having access for a whole-school approach to data protection.



COST EFFECTIVE

GDPRiS offers schools a highly secure, cloud-based platform, providing a low-cost and budget friendly solution to full GDPR compliance.

down-arrow

SIMPLE AND INTUITIVE

GDPRiS has been designed specifically for schools and academy trusts and its ease of use helps make it an invaluable tool to achieve full GDPR compliance.


SCHOOL CENTRIC

GDPRiS is a secure, cloud-based tool which reflects existing processes in schools and pro-actively prompts them to meet and exceed the new GDPR.


GREAT GDPR SUPPORT

We're on hand to offer friendly and timely guidance to help schools meet and exceed GDPR requirements, advocating accountability and demonstrating compliance.


WHY CHOOSE GROUPCALL?

Groupcall has a 17 year heritage providing innovative solutions to schools. Our technologies are used in 75% of UK schools, transferring data on 7.5 million children daily.

 

WHO WE WORK WITH

Here at just some of the great organisations who trust Groupcall to provide world-class solutions:

    • Entrust
    • Norfolk-1
    • npw-1

down-arrow (2)

FREQUENTLY ASKED QUESTIONS

Does the GDPR really affect schools?

Yes, every organisation or business that handles personal data needs to review its data protection policies and bring them in line with the General Data Protection Regulation.

What is classed as personal data in the GDPR?

Any information that can identify a natural person (‘the data subject’). This person can be identified, directly or indirectly, such as – name, email address or where they are, but also online identifiers such as IP address, types of website cookies and other device identifiers. Thus, an email from a parent carrying data such as their name, email address, and their child’s name can clearly identify both the child and the parent.

Just a UPN or an MIS identifier in a specific school is also personal data as it points to the child’s and in the case of the MIS identifier, to also the parent/carer’s information.

What is a data audit?

A data audit is a step-by-step process that examines every stage of a data processing mechanism. As data controller, a school must be 100% satisfied that everything a data processor says it is doing is true and can be seen clearly and checked.

An audit should highlight any issue that arises at any step of the processing. Moreover, an audit will produce comprehensive records and reports to demonstrate that the data controller has done everything in its power to check that its personal data is processed safely, legally and ensures that the full rights of the data subject are met.

Does my school need a Data Protection Officer (DPO)?

Yes, as a public sector organisation you are obliged to have a DPO. However, you shouldn’t allow the fact that you don’t have a DPO yet delay your journey to compliance with the GDPR. The DPO oversees GDPR compliance, independently, and acts as an intermediary between the organisation, data subjects, and the supervisory authority, ICO. The minimum tasks of a DPO are defined as:

  • To educate the organisation and its employees regarding their data protection obligations and the rights of individuals.

  • To monitor compliance with the GDPR.

  • To act as the first point of contact for supervisory authorities and individuals whose personal data is processed (e.g. staff, students, parents, carers).
GET A QUOTE OR ORDER GDPRIS
down-arrow
FILL IN THE FORM TO FIND OUT MORE, REQUEST A FREE DEMO, AND TO ORDER GDPRIS: