GDPR: C
The implications for fundraising
Just when you thought you were on top of the General Data Protection Regulations (GDPR), we’d like to add fundraising activity into the mix! We put some of the most common scenarios to Clare Atkinson, Trustee of the Institute of Development Professionals in Education (IDPE)
lare Atkinson is a Trustee of the Institute of Development Professionals in Education, which has been working closely
with the ICO and legal professionals to develop best practice in the GDPR, relating to fundraising and community
engagement in schools. Clare is also Data Protection Officer and Development Director at Dr Challoner’s Grammar School in Amersham. Here, she answers some specific questions around the practicalities of implementing the GDPR in relation to fundraising activities...
Q
Universities enjoy significant support from
their alumni and FundEd encourages schools to do the same. On what basis can schools ask for contact information from students who are leaving?
A For some time, we have been seeking permission from our
alumni to keep in touch with them after they have left. We send newsletters and fundraising information, and encourage them to come back to help with our careers events or place adverts in the school magazine. The legal basis for collecting this information is legitimate interest. However, it is crucial that schools do not fall foul of the Privacy and Electronic Communications Regulations (PECR) and ensure that permission is sought for electronic communications such as email, SMS or telephone calls to numbers registered with the Telephone Preference Service (TPS). We would not contact a student without this consent; it would be counterproductive and potentially damaging. We have very few students who ask not to be contacted once they leave the school and we, of course, respect their wishes. Often, students will then renew contact at a time that it suits them to do so. The ICO has indicated that
doing this is acceptable, although schools should continue to review their lawful basis for processing, and ensure that legitimate interest to contact your alumni remains valid. Schools must be explicit in their privacy notice as to the reason why they are collecting any information and what they will be using that data for. You will also need to have a retention policy, which clearly states how long you keep your data for. Manage your communications so as not to bombard an alumnus. We want to build long-term, lasting relationships rather than something short-term.
FundEd SUMMER 2018 11
IMAGES: VENIMO/
ISTOCKPHOTO.COM
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44 |
Page 45 |
Page 46 |
Page 47 |
Page 48 |
Page 49 |
Page 50 |
Page 51 |
Page 52 |
Page 53 |
Page 54 |
Page 55 |
Page 56 |
Page 57 |
Page 58 |
Page 59 |
Page 60
