{"id":3607,"date":"2018-03-05T15:33:28","date_gmt":"2018-03-05T15:33:28","guid":{"rendered":"https:\/\/www.caspaonline.co.uk\/?page_id=3607"},"modified":"2018-07-19T09:06:55","modified_gmt":"2018-07-19T08:06:55","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/www.caspaonline.co.uk\/key-features\/gdpr\/","title":{"rendered":"GDPR &#8211; The General Data Protection Regulation"},"content":{"rendered":"<h2>Summary<\/h2>\n<p>From 25th May 2018, the EU&#8217;s General Data Protection Regulation replaced the UK&#8217;s Data Protection Act.<\/p>\n<p>Schools, and other users of CASPA, must constantly ensure that they are GDPR compliant; SGA Systems Ltd and RSE Insight Ltd must do the same.<\/p>\n<p>Please <a href=\"https:\/\/www.caspaonline.co.uk\/downloads\/CASPA-and-the-General-Data-Protection-Regulation.pdf\" target=\"_blank\" rel=\"noopener\">click here<\/a> for a guide to normal operation of CASPA with respect to the GDPR<\/p>\n<p>Please <a href=\"https:\/\/www.caspaonline.co.uk\/downloads\/Processing-of-personal-data-to-provide-technical-support-for-CASPA-under-the-GDPR.pdf\" target=\"_blank\" rel=\"noopener\">click here<\/a> for a guide to management of certain support incidents with respect to GDPR<\/p>\n<p>In summary:<\/p>\n<ul>\n<li>CASPA exists only on your IT ecosystem to which neither RSE Insight Ltd nor SGA Systems Ltd has access<\/li>\n<li>Annual data returns do not include\u00a0Personal Data or Sensitive Personal Data and are therefore outside of the scope of the GDPR<\/li>\n<li>If you have to send files to us to resolve a rare support incident, these files could include\u00a0Personal Data or Sensitive Personal Data (depending on which files are required to resolve the incident) and are therefore subject to the GDPR<\/li>\n<li>SGA Systems Ltd will never receive Personal Data or Sensitive Personal Data as all support activities are fulfilled by RSE Insight Ltd<\/li>\n<li>RSE Insight Ltd may need to process files containing\u00a0Personal Data or Sensitive Personal Data if the support incident requires it and as a result, a\u00a0data processing agreement will be required between the CASPA user&#8217;s organisation and RSE Insight Ltd<\/li>\n<\/ul>\n<h2>Data processing agreement<\/h2>\n<p>Further to the guide to management of certain support incidents with respect to GDPR\u00a0linked above (Processing of personal data to provide technical support for CASPA under the GDPR), if a CASPA user needs to send files to RSE Insight to investigate and\/or resolve an issue, a data processing agreement may be a pre-requisite to sending the necessary files.\u00a0 Since not all files sent contain Personal Data or Sensitive Personal Data,\u00a0RSE Insight will advise whether the files required fall into this category.<\/p>\n<p><strong>Since we carry out no data processing until relevant files are needed to resolve a support incident, it is not necessary to have a data processing agreement every organisation using CASPA.\u00a0 The vast majority of organisations using CASPA never need to send these types of files to us.<\/strong><\/p>\n<p>However, should an issue be discovered by a CASPA user that requires files to be sent to RSE Insight and those files contain\u00a0Personal Data or Sensitive Personal Data, there would be a delay whilst the data processing agreement is agreed and signed as RSE Insight must not accept relevant files without this agreement, and the sending organisation must not send them.\u00a0 As a result, the addendum can be signed and returned to RSE Insight in advance if you wish.<\/p>\n<p>Please <a href=\"https:\/\/www.caspaonline.co.uk\/files\/data-processing-addendum\/\">click here<\/a>\u00a0for our Data Processing Addendum, either to view or to download, sign and return.<\/p>\n<h2>Privacy notices<\/h2>\n<p>Privacy notices relating to CASPA are published below:<\/p>\n<p>RSE Insight Ltd &#8211; <a href=\"http:\/\/rseinsight.co.uk\/web\/Privacy%20notice.pdf\" target=\"_blank\" rel=\"noopener\">Click here<\/a><\/p>\n<p>SGA Systems Ltd &#8211; <a href=\"http:\/\/www.sgasystems.co.uk\/SGA-Systems-Ltd-Privacy-Notice.pdf\" target=\"_blank\" rel=\"noopener\">Click here<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Summary From 25th May 2018, the EU&#8217;s General Data Protection Regulation replaced the UK&#8217;s Data Protection Act. Schools, and other [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":8,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"acf":[],"_links":{"self":[{"href":"https:\/\/www.caspaonline.co.uk\/wp-json\/wp\/v2\/pages\/3607"}],"collection":[{"href":"https:\/\/www.caspaonline.co.uk\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.caspaonline.co.uk\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.caspaonline.co.uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.caspaonline.co.uk\/wp-json\/wp\/v2\/comments?post=3607"}],"version-history":[{"count":0,"href":"https:\/\/www.caspaonline.co.uk\/wp-json\/wp\/v2\/pages\/3607\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.caspaonline.co.uk\/wp-json\/wp\/v2\/pages\/8"}],"wp:attachment":[{"href":"https:\/\/www.caspaonline.co.uk\/wp-json\/wp\/v2\/media?parent=3607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}