AISL and the GDPR

The most significant piece of European data protection legislation to be introduced in 20 years will come into force on 25 May 2018. The EU General Data Protection Regulation (GDPR) replaces the 1995 EU Data Protection Directive. The GDPR strengthens the rights that individuals have regarding their personal data and seeks to unify data protection laws across Europe, regardless of where that data is processed.

AISL would like to assure the community that both the school and all our data processors will be fully compliant with the GDPR by May 25th, 2018. AISL is actively working to ensure our processes and systems meet the rigorous requirements of the GDPR. We have been planning for GDPR for the past year and have undertaken the following:

• We've identified the personal data held and collected on our systems and undertaken a review to ensure this is appropriate for the services we offer.
• We're making changes to how data is removed from our internal systems in order to satisfy the Right to Erasure.
• We have scheduled staff training and awareness surrounding GDPR.
• We have appointed a Data Protection Office (DPO).
• We're updating our school documentation to include appropriate clauses for GDPR.
• We're coordinating with our data processors to ensure we have agreements with them which include appropriate clauses for GDPR and that they are/will be compliant by May 25th 2018.

Consistent with the new regulations, our data processing principles are as follows:

• Data is processed fairly and lawfully
• Data is processed only for specified and lawful purposes
• Processed data is adequate, relevant and not excessive
• Processed data is accurate and, where necessary, kept up to date
• Data is not kept longer than necessary
• Data is processed in accordance with an individual's consent and rights
• Data is kept secure