Part two: Wednesday 30th November – 9.30-11am
Subject Access Requests (SAR) from parents and staff consume a lot of time and energy in busy schools.
At this year’s ICO25 conference, the Information Commissioners Office (ICO) announced plans to launch an online SAR generator tool in the coming year, which likely will increase the number of requests – making it more important than ever to have the skills to respond efficiently.
Back in November 2020, the ICO reviewed eight educational establishments handling of SARs, prompted by the volume of complaints received, and made recommendations about what is expected.
This training is aimed at professionals in the education sector with responsibility for legal compliance and a working knowledge of the right of access looking for guidance on how to meet ICO standards and the requirements of data protection law. It will provide a summary overview of relevant law and guidance. Delegates will be given practical case studies for group discussion, following which there will be a plenary session where they share approaches to the issues which arose and ways to efficiently handle SAR while complying with ICO guidance.
Topics covered will include:
- ICO recommendations for education establishments handling SARs
- Establishing processes and maintaining records for handling SAR to comply with the UK GDPR accountability requirements
- How to recognise a SAR
- Verifying SARs
- Basis for refusing SARs
- Clarifying scope of SARs
- Handling third party requests made on behalf of a data subject – in particular SARs which relate to children
- Deadlines for responding to SARs and time extensions
- Searching for personal data: applying the ICO guidance in practice
- Proper application of exemptions to withhold, such as personal data of other individuals and legal privilege
- Legally required supplementary information to provide when responding to a SAR
Who will deliver the training?
Sean Morris, our Legal Manager at Navigator, trained as a solicitor in the public sector at Brighton and Hove City Council, the first UK local authority legal team to receive LEXCEL accreditation, the quality mark for excellence in practice management and client care. He completed a seat in Education and Social Work where his responsibilities included representing the local authority at Special Educational Needs Tribunals.
Having specialised in employment law, Sean joined the litigation team at RBS/NatWest Mentor where he defended Tribunal claims and in addition advised on data protection law. This involved supporting businesses from a wide range of sectors, such as retail and health care, and helping prepare for compliance with GDPR. He went on to work for the largest employment law services provider for UK businesses and later joined a commercial private practice in Scotland where he advised on privacy and data protection law.
Sean has managed teams responding to complex data subject access requests on behalf of corporate clients in the retail and banking sectors and supported businesses dealing with data breaches. His experience reviewing business compliance has included drafting and updating internal data protection policies and privacy information for commercial clients, in addition to data mapping and drafting ROPAs for national energy companies and charities. He has also delivered training on data protection and employment law for educational establishments.
In 2019 he became a dual qualified solicitor with the Law Society of Scotland and the following year completed the Law Society of Ireland’s Certificate in Data Protection Practice.
What will the cost be?
The cost to attend both Part 1 & Part 2 will be £120 plus VAT.
Reserving a place
To book places online, please visit the SCIS website, linked here.