In November 2017, in preparation for GDPR, each department completed a Data Toolkit. This is an audit of all the offline and online personal data our organization holds. This helps us identify what steps need to be taken to ensure compliance with the GDPR and the DPA, and allows us to retain a record of our processing activities, in line with GDPR Art 30.
Toolkits are live documents, and constantly under review, so if you are changing the way in which you process data, your department's toolkit may need updating.
Please get in touch with your department's toolkit owner in the first instance. If you are not sure who this is, speak to the DPO (DPO@beds.ac.uk), who will be able to advise.
If your department has not completed a toolkit, please do so, and send it back to the DPO.
Relevant documents: