The GDPR fundamental principles
All processing of personal data must comply with the fundamental principles stated in the General Data Protection Regulation (GDPR).
Principles that are to permeate personal data processing
The General Data Protection Regulation states a number of fundamental principles that can be said to be the core of the regulation. The principles apply in the case of all processing of personal data and it is important that you understand and apply them.
Always have the principles at the back of your mind when you are working with personal data processing.
The principles in brief
The principles mean among other things that as data controllers you:
• must have a lawful basis under the General Data Protection Regulation to be able to process personal data
• may only collect personal data for specific, explicitly stated and legitimate purposes
• are not to process more personal data than is necessary for those purposes
• are to ensure that the personal data is accurate
• are to erase the personal data when it is no longer needed
• are to protect the personal data, for example so that unauthorised persons are not given access to it and so that it is not lost or destroyed
• are to be able to demonstrate that and how you live up to the General Data Protection Regulation.
Accountability
Anyone familiar with the Personal Data Act will recognise these fundamental principles. A new aspect, however, is that it is no longer sufficient to comply with the law but the data controller must also be able to demonstrate that and how the provisions of the General Data Protection Regulation are complied with.
(Source: Integritetsskyddsmyndigheten IMY (fka Datainspektionen)
Personal data collected and processed by the preschool may be handled in the examples listed below
Enrolment forms
Background checks
Contracts
Allergy information
Pension information
Child enrolment forms/Information
End of year reports
Parent complaints
Qualifications/References/Staff training etc
Information on maternity leave, paternity leave, holidays, tjänstledighet etc
Staff information
Injury reports
Complaints/Allegations
Grievance/Disciplinary records
Salary slips/Payroll
Attendance
Child protection records
Data base applications
Recruitment records successful and unsuccessful CVs
© Copyright IV - Idéburen Välfärd