First Steps
There is a good audit tool here https://ico.org.uk/for-organisations/resources-and-support/data-protection-self-assessment/data-controllers/
Also this document
https://ico.org.uk/media/1624219/preparing-for-the-gdpr-12-steps.pdf
Data Audit
One of the first steps is for us to identify the data we hold and each of us needs to do an audit. I would suggest that there is going to be a large amount of common ground here and it would probably be useful for us all to do this in draft form before we meet. What do you think?
Joanne Weightman has drafted a starting point for such a document and I will put it in the document drive
Privacy Statements
A number of you mentioned these. Again I think each school will produce ones that are virtually the same so why dont we work on one together and share. As a starting point Ive found some useful documents including some from Dfe. (They are on document drive)
Retention Times and Policies
Again a number mentioned this so have done a bit of research and found some model examples (on document drive). Have not had time to look in depth so dont know how appropriate they are.
Dorset https://ico.org.uk/media/1624219/preparing-for-the-gdpr-12-steps.pdf