Data Protection and Information Governance Advice Services
This service is for Derby City schools and academies.
Derby City Councils Information Governance Team is widely experienced in all information governance related matters.
Schools and academies have an obligation to comply with the UK General Data Protection Regulations and Data Protection Act 2018. Understanding and applying the numerous requirements can feel complicated and burdensome, we are here to help schools navigate through and ensure they are compliant. We take a supportive and simplistic approach to remove unnecessary complexities.
As a local authority we have close working links with statutory bodies such as Ofsted, the Department of Education and the Department of Health and Social Care. As such, we understand the conflicting demands and the need for information flows to be enabled.
What the service provides
We provide two different levels of services which you can choose depending on your needs:
- Option A subscription – our premium level package
- Option B subscription – our standard package
Option A subscription
Our premium level subscription package includes a Data Protection Officer (DPO) to fulfil the statutory position and wider information governance advice. Please see below for more details.
What can we advise and support on?
- General Data Protection advice
- Support on matters relating to Freedom of Information Act 2000 & Environmental Information Regulations 2004
- Advice on relevant ICO codes of practice and other policies applicable to schools & academies
- Use of CCTV & photography in schools &academies
- Information security & use of secure email
- Use of electronic devices (laptops, mobile phones, etc) when working onsite or remotely
- Information sharing and processing contracts, including support on getting the relevant documentation in place
- Record management and retention
- Secure transfer of pupil data
- Help reduce the risk of security breaches.
What’s included as standard?
- Annual renewal of your ICO Data Controller Registration
- Template policies (e.g. for Data Protection and Freedom of Information).
- Annual data protection training for key staff
- Quarterly newsletter promoting awareness on key information governance topics
- Updates on changes in statutory guidance and legislation
- Access to an online toolkit of policies, procedures and guidance
- Specialist assistance in carrying out investigations into actual or suspected breaches of Data Protection.
What additional services are included with the premium package?
- Assistance and guidance with data protection impact assessments
- Providing advice and support to put in place a remediation plan after ICO incidents and inspections
- Support and advice with production of privacy notices
- Advice and guidance around information sharing with third parties
- 2 additional workshops or training sessions per year
- Provision of an Experienced Data Protection Officer
- Registration of Data Protection Officer with the Information Commissioners Office (if requested)
- Specialist guidance materials
- Support before and during Ofsted inspections.
- Additional 12 hours of support for your school/academy for any data protection needs.
Option A is capped at 24 hours per year and can be used for any need of your school from Monday to Friday 9am to 5pm except bank holidays.
Option B subscription
Our standard subscription Information Governance Advice Package focuses advice and assistance to ensure compliance with the UK GDPR, Data Protection Act 2018, Freedom of Information Act 2000, the Environmental Information Regulations 2004 and the Surveillance Code of Practice.
What can we advise and support on?
- General Data Protection advice
- Support on matters relating to Freedom of Information Act 2000 & Environmental Information Regulations 2004
- Advice on relevant ICO codes of practice and other policies applicable to schools & academies
- Use of CCTV & photography in schools &academies
- Information security & use of secure email
- Use of electronic devices (laptops, mobile phones, etc) when working onsite or remotely
- Information sharing and processing contracts, including support on getting the relevant documentation in place
- Record management and retention
- Secure transfer of pupil data
- Help reduce the risk of security breaches.
What’s included as standard?
- Annual renewal of your ICO Data Controller Registration
- Template policies (e.g. for Data Protection and Freedom of Information).
- Annual data protection training for key staff
- Quarterly newsletter promoting awareness on key information governance topics
- Updates on changes in statutory guidance and legislation
- Access to an online toolkit of policies, procedures and guidance
- Specialist assistance in carrying out investigations into actual or suspected breaches of Data Protection.
Option B is capped at 12 hours per year and can be used for any need of your school from Monday to Friday 9am to 5pm except bank holidays.
Benefits of our services
- Supporting schools & academies to ensure they remain compliant with all relevant statutory legislation.
- Access to a service which has working relationships with relevant government departments such as, the Department for Education.
- Access to a specialist, skilled, trained and knowledgeable in-house team who can provide advice and support on all aspects of information security, data protection and freedom of information in relation to the school environment.
- Supporting you to remain compliant with relevant statutory legislation. Including enhanced support in regards to national COVID changes and Brexit which we have assisted in implementing across schools in Derby.
- Reduced risk of security breaches that could result in a significant fine from the Information Commissioner’s office. Financial penalties may be up to the equivalent of £17.5m or 4% of annual turnover.
- Reduced risk of negative media attention and damage to school’s reputation.
- Access to an annual training session that will benefit key school personnel and will keep schools abreast of new legislation and guidance.
- Access to a dedicated web portal containing a whole range of advice and guidance for subscribed schools only.
- Data Protection Officer school’s representation at Information Commissioner’s office (only included with the option A subscription).
- Advice by the Data Protection Officer who is a professional expert in data protection laws and practices that offers schools full support (only included with the option A subscription).
- Data Protection Officer provides a permanent supervisor in processing activities (only included with the option A subscription).
- 12 extra hours of support services included within our option A subscription.
Cost
| Package | Cost | Order form |
| Option A | £1649 | Data protection information governance packages 2023-24 order form |
| Option B | £699 | Data protection information governance packages 2023-24 order form |
CiA name:
Internal supplier code:
Contact
For advice and guidance please feel free to contact the information governance team on 01332 640763.
Email: data.protection@derby.gov.uk
How to order
Now you have selected the services you require, please visit the how to order services section to find out how you can place your order.