From May 2018 the new General Data Protection Regulations (GDPR) will be in place, replacing the current Data Protection Act. The new regulations will apply to all types of organisations – including small charities and leisure time music groups. This toolkit brings together guidance, tools and resources for groups to use to prepare for the changes.
GDPR: What you need to know
An overview of GDPR - the background, what is changing, what you need to do to prepare and why Brexit won't change the outcome.
Voluntary Arts briefing - GDPR: Data Protection
A more in-depth guide from Voluntary Arts, covering the principles of GDPR, definitions of the main terms and rights, and some FAQs.
GDPR: guidance for groups and Interactive audit tool
GDPR is a meaty topic, with plenty to take in. We have both full guidance on all aspects likely to be relevant to groups available to download, as well as an interactive tool to help you filter which bits of the guidance you need to act on based on the kinds of data you currently collect/hold.
Data Protection and Retention Policy template (and notes)
This is a template Data Protection and Data Retention Policy for use by Making Music members. It has been designed in line with General Data Protection Regulations (GDPR) and can be used as it is - with just your specific details (e.g. group name) added in, or taken as a starting point with changes made to suit your specific activities and circumstance. The template comes with notes – please read the notes before using or changing the policy.
Data retention: what you need to know
This guidance looks at data retention in relation to the new General Data Protection Regulation (GDPR).
Template privacy notice and statements (and guidance)
This set of privacy statement templates (and associated guidance) provides a basis for the various different situations in which you might collect data and therefore need to provide a statement to users, as well as a template for a full privacy notice with further details for the public (to display on your website) on your group's approach to collecting, storing and protecting their data.
We hope you find this Making Music resource useful. If you have any comments or suggestions about the guidance please contact us. Whilst every effort is made to ensure that the content of this guidance is accurate and up to date, Making Music do not warrant, nor accept any liability or responsibility for the completeness or accuracy of the content, or for any loss which may arise from reliance on the information contained in it.