GDPR Support for Special Schools

The Special School environment poses some unique data protection challenges. There is far more special category data than in a standard school environment. There are also regular events where reaction has to take priority over other concerns. These events often include the use of special category data.
Unlike other school settings there may be judgements that have to be made about the capacity of students. All special schools whether in the private or public sector are subject to the Pupil Information Regulations and this must be accounted for in compliance plans.
Get In Touch

Managing GDPR Efficiently

Although most special schools are relatively small and often have a much higher ratio of staff to students, they are challenging environments. Such schools are good examples of how the word necessary comes into play when making decisions about data protection. Special category data, which in another setting may be locked away, might be on prominent display so that staff can react in time critical situations.

The necessity of the information does not reduce the requirement for it be managed appropriately. Special Schools need to pat great attention to the ways that they monitor the flow of personal data and ensure that it not disclosed by accident.

There is a much greater incidence of collaboration between agencies in relation to students. It is essential that the transfer of data is properly regulated and covered by agreements.

Finally we need to recognise that some settings have residential status. This brings a range of new data that needs to be recorded outside of the standard purposes of processing.

How We Can Help

The Sentry System

Cloud Based Compliance Management

Compliance management in one place

The Sentry System has been designed to make the task of managing compliance easier. It does this by providing step by step forms to record incidents, log SARs and document your data mapping and even deliver awareness training to staff. Every school can get benefit from these time saving modules.

The brand new audit recording function can be used to keep track of regular checks to see that personal data, particularly on paper has been logged out and back again throughout the day.

In addition to recording subject access requests the Sentry System can also be used to kee track of request made under the Pupil Information Regulations. It is worth noting that information released under the Pupil Information Regulations should be checked for GDPR compliance.

With simple workflows, documentation and support, the Sentry system makes GDPR easier.

What it includes

  • Breach Management
  • SAR management
  • Data Mapping and Suppliers
  • DPIA
  • Staff Training
  • Global Administrator Role
  • Four levels of user access

Download Sentry Brochure for Special Schools
Find out more on Sentry

DPO & Helpdesk Services

Expertise on call

The right sort of help

The data protection decisions made within a Special School can have much wider implications that those in other settings. Decisions about what data can be released in subject access requests and appropriate redaction are more difficult.

The DPO for a Special School needs to be able to balance the competing demands of data protection, safeguarding and decision about what might be in the best interest of the data subjects. Along with Further Education this is more challenging end of spectrum.

You can find out more on our DPO services pages, or get in touch to arrange a conversation with one of our senior consultants.

Service Models

  • Outsourced DPO: We provide full support including annual audits, 24/7 incident support, documentation and procedures.
  • DPO Support: Support for nominated members of your team for any data protection issues, working days or 24/7 options available
  • DPO Helpdesk: Incident based support for when you need additional expertise

Find out more on DPO Services

Auditing Services

Keeping Track

More than box ticking

We work with a significant number of Special Schools and other alternative provision settings. We understand the day to day demands of the school and are able to make judgements about effective practice.

This means that if you ask us to audit your school it will be done with a  recognition of processes you need to follow. We will ask searching questions in terms of your procedures but also spend a good deal of time looking at whether personal data is where you expect it be and that your control measures are functioning.

Coming out of the audit we will be delighted to make suggestions for where processes and potentially systems can be improved.

Service Models

  • Surveillance Programme: Structured visits with a set agenda
  • Due Diligence: A detailed programme covering process and practice including readiness assessment
  • Investigation: Where there has been a significant breach or concerns have been raised and end to end review of the procedure

Find out more on Audit Services

Training Courses

Building Your Expertise

Relevant Content

As well as everyone in school having basic awareness of their responsibilities there are also smaller groups of people who need more detailed information. We offer training course that are school specific and packed with real examples of both good and bad practice.

The training is mindful of the demands on peoples’ time. We can come to you and training can be delivered in half day sessions or in twilight sessions.

For those who use the Sentry system the practical training sessions also provide excellent guidance in how to get the best from it for your school.

Delivery Options

  • On-site Delivery: We bring the training to you. It often the only way to be able to get all the people together who need to be trained
  • Off-site Delivery: We are happy to arrange a suitable venue to meet your requirements

Coming Soon

  • Our own training centre
  • Online delivery
Find out more on Training

Project Support

Help When You Need It

Clearly Defined Tasks

In and among the day to day tasks of managing GDPR compliance there some that can take a huge amount of resource. If you have a major system development you’ll need to undertake a data protection impact assessment, or you may be trying to figure out how to reduce the frequency of breaches.

We can provide expert support for these type of projects. People who have experience in education, in data protection and in school systems.  We’ll scope a project out and then agree a schedule for delivery.

Types of Project

  • Data Protection Impact Assessments
  • Complaints & Investigations
  • Due Diligence
  • ICO Inspection Preparations
Find out more on Project Support

What Our Customer’s Say

Delius is a large Special School in Bradford, West Yorkshire. Medical information is used on a daily basis and every day has new challenges. Sentry enables Delius to ensure that GDPR management is delivered simply and easily.

Delius Special School

Download Sentry Brochure for Special Schools

Download Brochure

Contact Us