DUAA Archives - GDPR Sentry https://gdprsentry.com/tag/duaa/ GDPR compliance made easier with a management system and expert support Wed, 08 Oct 2025 12:47:23 +0000 en-GB hourly 1 https://wordpress.org/?v=6.8.11 139546355 Is It in Your Interest? Understanding Legitimate Interests in the Age of Data Reform https://gdprsentry.com/is-it-in-your-interest-understanding-legitimate-interests-in-the-age-of-data-reform/ Sun, 02 Nov 2025 09:29:52 +0000 https://gdprsentry.com/?p=6319 Following on from our post around lawful basis in September, let’s dive in with a deeper look at legitimate interests.   You’re sitting at your desk, reviewing your school’s privacy notice, and there it is again: “We process personal data where necessary for our legitimate interests.” It’s a phrase you’ve seen in countless templates, DPIAs, […]

The post Is It in Your Interest? Understanding Legitimate Interests in the Age of Data Reform appeared first on GDPR Sentry.

]]> 6319 “Lawful Basis for Processing in Schools & Universities: Which One Should I Use?” https://gdprsentry.com/lawful-basis-for-processing-in-schools-universities-which-one-should-i-use/ Mon, 15 Sep 2025 08:24:17 +0000 https://gdprsentry.com/?p=6316 Let’s be honest: when most of you became educators, you dreamed of inspiring minds, not mastering the fine print of data protection law. But here you are, in a post-GDPR, post-DUAA world, where understanding the “lawful basis for processing” is as crucial as remembering to take the register. The good news? While the Data (Use […]

The post “Lawful Basis for Processing in Schools & Universities: Which One Should I Use?” appeared first on GDPR Sentry.

]]> 6316 “RoPA’s: Why Every School Needs to Get Their Data House in Order” https://gdprsentry.com/ropas-why-every-school-needs-to-get-their-data-house-in-order/ Sun, 10 Aug 2025 13:44:32 +0000 https://gdprsentry.com/?p=6301 When I first mention a RoPA to staff in schools or multi-academy trusts, I usually get one of three responses: A) a knowing sigh, B) a panicked blink, or C) a hopeful, “Is that the thing we can outsource?” The truth is, a Record of Processing Activities (RoPA) sounds more bureaucratic than it actually is. […]

The post “RoPA’s: Why Every School Needs to Get Their Data House in Order” appeared first on GDPR Sentry.

]]> 6301 Data Use Complaint: A Story from the School Office https://gdprsentry.com/data-use-complaint-a-data-story-from-the-school-office/ Mon, 21 Jul 2025 10:36:52 +0000 https://gdprsentry.com/?p=6287 It begins with a simple email. “Dear Office, I’m concerned about the data collected by the new homework app. Could you let me know what’s being stored about my daughter, and whether we can opt out?” At first glance, your school administrator treats it as a routine enquiry. A parent, understandably cautious. The message gets […]

The post Data Use Complaint: A Story from the School Office appeared first on GDPR Sentry.

]]> 6287 “You’ve Got (Subject Access) Mail!” – Navigating SARs in Schools Without Losing Your Sanity https://gdprsentry.com/youve-got-subject-access-mail-navigating-sars-in-schools-without-losing-your-sanity/ Mon, 14 Jul 2025 09:02:49 +0000 https://gdprsentry.com/?p=6277 Imagine it’s a rainy Thursday afternoon. You’ve just finished playground duty and you’re halfway through a lukewarm coffee when the email pings into your inbox. It’s a Subject Access Request (SAR), and not just any SAR, it’s one of those SARs: someone wants “all the information you hold about them.” Cue internal screaming. But don’t […]

The post “You’ve Got (Subject Access) Mail!” – Navigating SARs in Schools Without Losing Your Sanity appeared first on GDPR Sentry.

]]> 6277 The DUAB is Now Law: What This Means for Education https://gdprsentry.com/the-duab-is-now-law-what-this-means-for-education/ Tue, 01 Jul 2025 15:34:13 +0000 https://gdprsentry.com/?p=6266 On the 19th of June 2025, the Data Use and Access Act (commonly known as the DUAB or DUA Bill) officially received Royal Assent, marking a significant update to the UK’s data protection framework. While it doesn’t entirely rewrite GDPR, it does bring a number of key changes that educational institutions need to be aware […]

The post The DUAB is Now Law: What This Means for Education appeared first on GDPR Sentry.

]]> 6266 “Decoding the Data (Use and Access) Bill: What Educators Need to Know” https://gdprsentry.com/decoding-the-data-use-and-access-bill-what-educators-need-to-know/ Tue, 05 Nov 2024 14:40:12 +0000 https://gdprsentry.com/?p=6130 Imagine you’re sat in the staffroom, half-eaten biscuit in one hand, half-finished student spreadsheet on the screen. You scroll down a list of names, notes, and numbers, some of which, to your horror, date back to the year David Cameron was still Prime Minister. You mutter to yourself, Why do we still have this data? […]

The post “Decoding the Data (Use and Access) Bill: What Educators Need to Know” appeared first on GDPR Sentry.

]]> 6130