Timeline for GDPR - Storage and processing of student email addresses
Current License: CC BY-SA 4.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 17, 2020 at 8:31 | history | edited | CommunityBot |
Commonmark migration
|
|
| Apr 5, 2020 at 14:13 | comment | added | Chris Pickford | @amon That's really helpful information. Thank you. I'll look into article 28. | |
| Apr 5, 2020 at 8:52 | comment | added | amon | @ChrisPickford Yes – if the school wants you to process personal data on your behalf, they will likely have to engage you as a data processor, which involves a contract that must cover certain items per Art 28 GDPR. This means that you would be forbidden from using the data for your own purposes, but also simplifies your compliance: you don't have to be concerned with the legal basis for processing, and don't have to provide a privacy policy. | |
| Apr 3, 2020 at 13:04 | comment | added | Chris Pickford | Thanks. I guess my understanding of the difference is that I'll be storing the email address data in my own database, rather than on-premise in the school. Does that mean that I will therefore be the data processor? | |
| Apr 3, 2020 at 1:01 | history | answered | Greendrake | CC BY-SA 4.0 |