CYNGOR SIR YNYS MÔN / ISLE OF ANGLESEY COUNTY COUNCIL Meeting: Audit & Governance Committee Date: 1 December 2020 Title of Report: Anglesey Schools Data Protection Evaluation Report- First Evaluation Visit to Anglesey Primary and Secondary Schools by Schools Data Protection Officer- July 2020 Purpose of the Report: To inform members as to the level of data protection compliance and risk in relation to schools Report by: Elin Williams, Schools Data Protection Officer Ext: 1833,
[email protected] Contact Officer: Elin Williams, Schools Data Protection Officer Ext: 1833,
[email protected] Purpose of this report To provide the Audit & Governance Committee with the Schools Data Protection Officer’s analysis of where the schools are up to in terms of compliance with requirements under data protection legislation, mainly under the General Data Protection Regulation (GDPR) following first visit to primary and secondary schools. This report gives a summary of findings of the Schools Data Protection Officer following the visits and offers next steps to take to ensure that all schools meet data protection requirements as soon as possible. The report includes details around the findings of the visits to 45 schools between October 2019 and February 2020 and the steps taken following the visits up to July 2020. Introduction Following the appointment of a Schools Data Protection Officer in the Learning Service during August 2019, the officer undertook the first evaluation visit to 45 out of the 46 Anglesey primary and secondary schools. The visits was also an opportunity to follow up on some of the action points that arose from the Zurich Risk Engineering UK inspection report (dated June 2019).