GDPR: Data Protection Toolkit

Since May 2018 the new General Data Protection Regulations (GDPR) have been in force, replacing the old Data Protection Act. The new regulations apply to all types of organisations – including small charities and leisure time music groups. This toolkit brings together guidance, tools and resources for groups.

GDPR: What you need to know

An overview of GDPR - the background, what is changing, what you need to do to prepare and why Brexit won't change the outcome.

Read 'GDPR: what you need to know'

Creative Lives briefing - GDPR: Data Protection

A more in-depth guide from Creative Lives, covering the principles of GDPR, definitions of the main terms and rights, and some FAQs.

Read the Creative Lives briefing

GDPR: guidance for groups and Interactive audit tool

GDPR is a meaty topic, with plenty to take in. We have both full guidance on all aspects likely to be relevant to groups available to download, as well as an interactive tool to help you filter which bits of the guidance you need to act on based on the kinds of data you currently collect/hold. You can access both via the link below. 

Use the interactive audit tool

Data Protection and Retention Policy template (and notes)

This is a template Data Protection and Data Retention Policy for use by Making Music members. It has been designed in line with General Data Protection Regulations (GDPR) and can be used as it is - with just your specific details (e.g. group name) added in, or taken as a starting point with changes made to suit your specific activities and circumstance. The template comes with notes – please read the notes before using or changing the policy.

View the template

Read the accompanying notes

Data retention: what you need to know

This guidance looks at data retention in relation to the new General Data Protection Regulation (GDPR).

Template privacy notice and statements (and guidance)

This set of privacy statement templates (and associated guidance) provides a basis for the various different situations in which you might collect data and therefore need to provide a statement to users, as well as a template for a full privacy notice with further details for the public (to display on your website) on your group's approach to collecting, storing and protecting their data.

Read the guidance

View the templates 

We hope you find this Making Music resource useful. If you have any comments or suggestions about the guidance please contact us. Whilst every effort is made to ensure that the content of this guidance is accurate and up to date, Making Music do not warrant, nor accept any liability or responsibility for the completeness or accuracy of the content, or for any loss which may arise from reliance on the information contained in it.