Under UK GDPR, there is a requirement for your school to appoint a Data Protection Officer (DPO). Your DPO must have specific experience and expert knowledge of data protection law and its practical application. The Education Authority (EA) can assume the role of DPO for your school if you wish, subject to the completion of a DPO Services Agreement between your school and the EA.
Under this arrangement, the Principal remains the key point of contact for all school data protection issues and has operational responsibility for day to day management of all data protection matters but is provided with specialist DPO support from EA’s Information Governance team. The Board of Governors of the School remains ultimately responsible for ensuring the School is compliant with UK GDPR.
If your school has not already completed a DPO Services Agreement with the EA and you wish to avail of this service, please call 028 9047 5011 or email [email protected] to request an information pack.