資源描述：
《sharing personal data with an external data processor version 1 與外部數(shù)據(jù)處理器版本1個人共享數(shù)據(jù)》由會員上傳分享，免費在線閱讀，更多相關內(nèi)容在教育資源-天天文庫。
1、Title:SharingPersonalDatawithanExternalDataProcessorPurpose:GuidanceforSchoolsoncomplyingwiththeirdataprotectionresponsibilitieswhenusinganexternalthirdpartytohelpdeliveraserviceAudience:SchoolPrincipalsandBoardsofGovernorsThisdocumentisintendedtoactasa
2、generalguideforSchools.ItshouldnotbetakenasanabsolutestatementofthelawandobligationscoveredbytheDataProtectionAct1998.ItisacriminaloffencetobreakanyconditionsoftheAct.18Version:1.0DocumentControlVersion:1.0Date:25November2011Author(s):WELB/SELB/C2kDistr
3、ibution:SchoolswithinSELB/WELBareaNextReviewDate:3yearsfromdateofissue18Version:1.0PURPOSEThepurposeofthisguidanceistoprovidedataprotectionadvicetoSchoolscoveringsituationswhereaSchoolemploysathirdpartytohelptheSchoolprovideaserviceinvolvingaccesstopers
4、onaldata.TheguidancehasthreeParts:·Part1isintendedtoinformSchoolsoftheirresponsibilitiesundertheDataProtectionAct1989(theAct)inthecontextofsharingdatawithathirdparty.·Part2providesadviceonthetechnicalstandardsandcontrolsthatmustbeconsideredbeforeallowin
5、gathirdpartyaccesstoSchooldata.·Part3oftheguidanceisintheformofaModelQuestionnairewhichSchoolscanadaptanduseasameansofobtainingandrecordingtherequiredassurances.PART1DATAPROTECTIONGUIDANCE1.1BackgroundSchoolsareDataControllersundertheAct,astheydetermine
6、howandwhypersonaldataiscollected.Schoolsareresponsibleforensuringthatsuchdataisheldsecurelyandthataccesstoitismanaged.Often,Schoolsareadoptingnewtechnologiestodeliverservices,communicatewithparentsandhelpteacherscollaborate.Schoolsmusthoweverneverlosesi
7、ghtoftheirresponsibilitiesasDataControllersundertheAct.1.2ExamplesofexternaldataprocessingListedbelowaresomeexampleswhereathirdpartymightbeemployedbyaSchooltohelpdeliveraservice:18Version:1.0·Contactbytextore-mailingservices·Attendance/behaviourmanageme
8、ntreporting·Cashlesscateringsystems·Virtuallearningenvironmentsoronlineassessmentenvironments1.3UnderstandingrelationshipsItistheSchool’sresponsibilityasDataControllertodecidethelevelofaccesstograntwhensharingdatawithanexternalth
