GDPR is a new EU regulation covering data protection and stands for General Data Protection Regulation. It will come into force on 25 May 2018 and replaces our current Data Protection Act 1998 and the Electronic Communications Regulations 2003.
There will be new obligations for all companies regarding personal data and new rights for individuals. Nurseries must recognise that GDPC isn’t a set of guidelines for best practice, it’s a new set of laws.
The main focus of GDPR is consent and the right to privacy for individuals. In practice this means making sure that everyone (parents, staff, past customers etc.) knows what data you hold on them, has agreed that you can hold their data and knows what you intend to
do with it, who you might share it with (if anyone) and how long you are likely to keep it.
Individuals will have the right to be forgotten and the right to object to certain types of data use.
What should I be doing now to prepare for the GDPR?
Don’t wait but also don’t panic! You have time to prepare if you start now. This session will provide a platform for you to ask questions and we will also be discussing the following areas: