{"id":311,"date":"2020-02-28T11:39:01","date_gmt":"2020-02-28T11:39:01","guid":{"rendered":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/?p=311"},"modified":"2021-10-20T13:00:51","modified_gmt":"2021-10-20T13:00:51","slug":"data-protection-do-i-need-to-complete-a-dpia-form","status":"publish","type":"post","link":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/2020\/02\/28\/data-protection-do-i-need-to-complete-a-dpia-form\/","title":{"rendered":"Data Protection &#8211; Do I need to complete a DPIA form?"},"content":{"rendered":"<p>Before purchasing or using a software programme, app or website Data Protection should be considered.\u00a0 If the product requires you to create an account, enter information about yourself or other people then a Data Protection Impact Assessment (DPIA) is required to comply with Data Protection legislation.\u00a0The DPIA is reviewed by the organisation\u2019s Data Protection Officer, who will decide whether to approve the product.\u00a0 On some occasions specific guidance is placed on the use of the product, for example additional parental consent requirements, data purging schedules or limits on information to be provided.<\/p>\n<p>A link to download a blank DPIA and view full list of all the products that are authorised for use, products which schools are completing DPIA\u2019s for and DPIA\u2019s currently being reviewed can be found at the top of the Education Weekly Bulletin issues to all schools and support teams.<\/p>\n<h2>Do you always need to complete a DPIA?<\/h2>\n<p>The short answer is yes, but if you are creating an account for a product or website using generic information not linked to a specific person then the DPIA should only require the screening questions to be completed.\u00a0 For example creating an account using the school name rather than a person\u2019s name, using a generic admin email account not a personal email and entering the school address instead of a home address.<\/p>\n<p>It is worth considering when creating accounts to access resources whether generic information could be used without breaching the terms and conditions of the account you are creating.<\/p>\n<h2>If you have to enter personal details to create an account or to use a programme when should you complete a DPIA?<\/h2>\n<p>The DPIA should be completed prior to purchasing any new product or subscription.\u00a0 This will ensure that you are able to use the product straight away after purchase.\u00a0 It is also worth checking if you are renewing an existing subscription that was originally taken out prior to the updated Data Protection legislation coming into law that it\u00a0has been reviewed and authorised.<\/p>\n<h2>Where can I find out more information?<\/h2>\n<p>You can find full guidance on completing the Moray Council DPIA form in the Data Protection Guidance &#8211; <a href=\"http:\/\/intranet.moray.gov.uk\/Information_management\/information_security.htm\">HERE<\/a><\/p>\n<p>For general information about Data Protection legislation visit the Information Commissioner&#8217;s Officer by clicking &#8211; <a href=\"https:\/\/ico.org.uk\/for-organisations\/guide-to-data-protection\/guide-to-the-general-data-protection-regulation-gdpr\/\">HERE<\/a><\/p>\n<p>Don&#8217;t forget you can complete the Moray Data Protection training module on <a href=\"http:\/\/council.learnprouk.com\/\">CLIVE<\/a><\/p>\n<p>Any specific questions about completing the DPIA, products approved\/rejected or currently under review can be directed to <a href=\"mailto:learntech@moray.gov.uk\">learntech@moray.gov.uk<\/a>.\u00a0 The Learning Technologists will liaise with the DPO on your behalf.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Before purchasing or using a software programme, app or website Data Protection should be considered.\u00a0 If the product requires you to create an account, enter information about yourself or other people then a Data Protection Impact Assessment (DPIA) is required to comply with Data Protection legislation.\u00a0The DPIA is reviewed by the organisation\u2019s Data Protection Officer, &hellip; <a href=\"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/2020\/02\/28\/data-protection-do-i-need-to-complete-a-dpia-form\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Data Protection &#8211; Do I need to complete a DPIA form?<\/span><\/a><\/p>\n","protected":false},"author":7634,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26,25],"tags":[32,31],"class_list":["post-311","post","type-post","status-publish","format-standard","hentry","category-data-protection","category-gdpr","tag-data-protection","tag-gdpr"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/wp-json\/wp\/v2\/posts\/311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/wp-json\/wp\/v2\/users\/7634"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/wp-json\/wp\/v2\/comments?post=311"}],"version-history":[{"count":7,"href":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/wp-json\/wp\/v2\/posts\/311\/revisions"}],"predecessor-version":[{"id":1140,"href":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/wp-json\/wp\/v2\/posts\/311\/revisions\/1140"}],"wp:attachment":[{"href":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/wp-json\/wp\/v2\/media?parent=311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/wp-json\/wp\/v2\/categories?post=311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.glowscotland.org.uk\/my\/mdlt\/wp-json\/wp\/v2\/tags?post=311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}