...
UK Information Commissioner on consent and alternatives and Jisc blog post on the draft guidance
SURFnet model processor agreement
Documents
Please upload your documents on Compliance and Frameworks
...
Impact and Risk Assessment
Links
Article 29 WP draft final guidance on DPIAs which references approvingly the UK Information Commissioner on Privacy Impact Assessment
...
Blog posts on on how we are categorising Jisc services and how to determine the appropriate legal basis
How we are providing future-proof (we hope) privacy notices for Jisc services
Peer-reviewed papers on how GDPR applies to incident response and big data, including learning analytics
...