Expert Advice Community

Guest

Parent's right

  Quote
Guest
Guest user Created:   Aug 22, 2018 Last commented:   Aug 22, 2018

Parent's right

Our school brings in an external psychologist to assess some students. She/he gets access to information such as child's name, parents phone number, class and medical information. what should we do to be gdpr compliant?
0 0

Assign topic to the user

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Andrei Hanganu Aug 22, 2018

Answer:

In the situation described by you the psychologist would act as a processor and would process the personal data you've mentioned on your behalf in order to provide the assessment. There are two things to be considered in this situation:

1. There needs to be a legally binding document between the school acting as a data controller and the psychologist acting as a data processor. These documents must comply with the requirements of EU GDPR art 28 – Processor (https://advisera.com/eugdpracademy/gdpr/processor/). You can find such template in your EU GDPR Documentation Toolkit (https://advisera.com/eugdpracademy/documentation/supplier-data-processing-agreement/).
2. The second thing is that you need to ment ion in your Privacy Notice(s) that personal data would be processed by third parties. You can find such template in your EU GDPR Documentation Toolkit (https://advisera.com/eugdpracademy/documentation/privacy-notice/)

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Aug 22, 2018

Aug 22, 2018

Suggested Topics

Guest user Created:   Jun 06, 2018 EU GDPR
Replies: 1
0 0

Parent's right

Guest user Created:   Feb 10, 2022 EU GDPR
Replies: 1
0 0

Right to Erasure