The EU’s General Data Protection Regulation (GDPR)was introduced to bring together a common approach to the use of personal data ensuring all data protection laws are applied in the same way in every country within the EU. It will protect EU citizens from organisations using their data irresponsibly and puts you in charge of what information is shared, where and how it is shared.
Transparency is a key requirement of GDPR and the first principle is that information must be processed lawfully, fairly and transparently.
Previously under the Data Protection Act 1998, a data protection statement was the way in which the Council informed individuals about the use of their personal information.
Under GDPR, a more detailed and extensive notice is required and the many ways in which the Council will use personal information must be clearly explained.
Previously you were asked to allow the Council to use personal information through means such as the annual data check or through consent forms for trips etc. The changes brought about by GDPR mean that a reliance on consent may not be appropriate.
The key purpose of this change is to put you in control of your own data and your child’s data
You have a right to be informed as to how the Council uses information about you and this will be done though issuing you with a privacy notice. Privacy notices are not optional, they are mandatory under GDPR.
A privacy notice is a statement about how personal information obtained by the Council will be used. When you have been advised about how your personal information will be used it should not be used for other purposes, unless there is a strong reason for doing so.
The school will have to make sure that when it requires information from you that there is a clear explanation of what is required, what it will be used for and how long the information will be retained for. When this is required you will be issued with a privacy notice.
Annually this will happened when the data check is undertaken and this will include educational trips and excursions. This privacy notice will also enable your personal data to be shared with other departments in the Council and only as appropriate e.g. with educational psychologists, the additional support needs team or social work.
There are key external agencies with whom we need to share your data in order that the Council and specifically Education Services has a secure system to manage your personal data. These are listed on the privacy notice too. The school will be able to provide you with further explanation about what these key agencies are if you require further information
Any other requirement for personal data will be accompanied by a separate privacy notice explain clearly the reason for this.
If you require any further information about the detail related to GDPR , follow this link to the Information Commissioner’s Office at https://ico.org.uk/
Should you have any questions or concerns about the Council’s handling of your personal data you can contact the Council’s Data Protection Officer. Karen Donnelly, Data Protection Officer, East Dunbartonshire Council
Sheria ya Ulinzi wa Takwimu ya EU (GDPR) ilianzishwa ili kuunganisha mbinu ya kawaida ya matumizi ya data ya kibinafsi, kuhakikisha sheria zote za ulinzi wa data zinatumika kwa njia ile ile katika kila nchi ndani ya EU. Inalinda raia wa EU kutoka kwa mashirika ya kutumia data zao bila wajibu na inakuweka kuwa na jukumu la habari gani inayoshirikiwa, wapi na jinsi inavyogawanywa. Uwazi ni mahitaji muhimu ya GDPR na kanuni ya kwanza ni kwamba habari lazima itengenezwe kisheria, kwa haki na kwa uwazi. Kwa mujibu wa Sheria ya Ulinzi wa Takwimu ya 1998, taarifa ya ulinzi wa data ilikuwa njia ambayo Baraza lilijulisha watu kuhusu matumizi ya habari zao za kibinafsi. Chini ya GDPR, taarifa ya kina zaidi na ya kina inahitajika na njia nyingi ambazo Baraza litatumia habari ya kibinafsi lazima zielezewe wazi. "Kabla ya hapo, ulilazimika kuruhusu Baraza kutumia habari za kibinafsi kupitia njia kama vile ukaguzi wa data wa kila mwaka au kupitia fomu za idhini kwa safari, nk. """ Mabadiliko yaliyoletwa na GDPR yanamaanisha kuwa kutegemea idhini inaweza kuwa haifai. Kusudi kuu la mabadiliko haya ni kukuweka udhibiti wa data yako mwenyewe na data ya mtoto wako Una haki ya kuarifiwa jinsi Baraza linatumia habari kuhusu wewe na hii itafanywa kwa kukupa taarifa ya faragha. Taarifa za faragha sio chaguo, ni lazima chini ya GDPR. Taarifa ya faragha ni taarifa kuhusu jinsi habari ya kibinafsi iliyopatikana na Baraza itatumiwa. Baada ya kushauriwa kuhusu jinsi habari yako ya kibinafsi itakavyotumiwa, haipaswi kutumiwa kwa madhumuni mengine, isipokuwa kuna sababu kali ya kufanya hivyo. Shule inapaswa kuhakikisha kwamba wakati inahitaji habari kutoka kwako, kuna ufafanuzi wazi wa nini inahitajika, ni nini itatumika kwa, na ni kwa muda gani habari hiyo itahifadhiwa. Wakati hii inahitajika utapewa taarifa ya faragha. Kila mwaka hii itatokea wakati data kuangalia ni kufanyika na hii itajumuisha safari za elimu na matembezi. Taarifa hii ya faragha pia itawezesha data yako ya kibinafsi kugawanywa na idara nyingine katika Baraza na tu kama inafaa, kwa mfano: Kwa wataalamu wa saikolojia ya elimu, msaada wa ziada unahitaji timu au kazi ya kijamii. Kuna mashirika muhimu ya nje ambayo tunahitaji kushiriki data yako ili Baraza na hasa Huduma za Elimu ziwe na mfumo salama wa kusimamia data yako ya kibinafsi. Hizi zimeorodheshwa kwenye taarifa ya faragha pia. Shule itaweza kukupa maelezo zaidi kuhusu nini mashirika haya muhimu ni kama unahitaji habari zaidi, mahitaji mengine yoyote ya data ya kibinafsi yataambatana na taarifa tofauti ya faragha, kuelezea wazi sababu ya hii. Ikiwa unahitaji habari zaidi kuhusu maelezo yanayohusiana na GDPR, fuata kiungo hiki kwa Ofisi ya Kamishna wa Habari katika https: www.ico.org.uk Ikiwa una maswali yoyote au wasiwasi juu ya utunzaji wa data yako ya kibinafsi, unaweza kuwasiliana na Afisa wa Ulinzi wa Takwimu wa Baraza. Karen Donnelly, Afisa wa Ulinzi wa Takwimu, Halmashauri ya Mashariki ya Dunbartonshire