Best Practice Update

    You are here:  
  1. Home
  2. Best Practice Update
  3. Contracts Register
hands at a laptop with virtual image of a contract popping out of the keyboard. Data protection education logo
Best Practice Updates

Contracts Register

📃 A digital technology contracts register is a lit of all the contracts in your organisation with external suppliers for the supply of digital technology products and services.
The contracts register might include :
  • IT support, printing, broadband, employee HR management systems, filtering, telephony
  • Maintenance and support contract for equipment
  • Leasing of any equipment
  • Software Licenses
  • SSL certificates
  • Security services, such as CCTV
The contracts register should work alongside your asset register where you keep a record of all the hardware you use in your organisation.

Keeping a record of digital data in an information asset register is also recommended.

If you are a school, multi-academy trust, or college, further help and guidance can be found in the DfE Digital Standards and the igital technology contracts register.

You should also review this when you do any due diligence on third party suppliers as you collect information about them.  Our customers have access to the Supplier Due Diligence Best Practice Area and our contracts records under each supplier.

If you would like to know more about how Data Protection Education can help provide support and guidance with the DfE Digital Standards 👉 https://digitalstandardstracker.co.uk/
Have you made a list of the third party suppliers you share data with?
Invalid Input

Amazing, you have ticked off an important item on the supplier due diligence checklist:
For further help and guidance and access to the full checklist, please contact This email address is being protected from spambots. You need JavaScript enabled to view it..



Your organisation should have completed some due diligence on each supplier or third party that you share personal data with, especially when large amounts or sensitive personal data is involved in the processing.   You can start this process by making a list of what contracts you have and who you share personal data with. Contact your data protection lead or DPO for further advice - we have template lists with categories to get you started.

Clipart cartoon with headphones on Please contact us for more help and advice about data protection compliance and cyber security standards: This email address is being protected from spambots. You need JavaScript enabled to view it. including the full checklist and best practice. 

 

Try asking the data protection lead in your organisation, or SLT digital lead or contact your DPO.  If you have a login to our portal, review the Supplier Due Diligence Best Practice Area.  Have a look at the DfE Digital Standards to see if you are compliant, for example, if you have a Contracts Register.

We can provide help and guidance with data protection compliance, cyber security standards and records management: This email address is being protected from spambots. You need JavaScript enabled to view it. including the full checklist and best practice.
©2024 Data Protection Education Ltd.

Search

  • News