This form is for completion prior to receiving a username and password for the E-Start system.  You will receive a copy of this information for reference as part of your training materials after the course.

Data Protection
The General Data Protection Regulation 2018 (GDPR) sets out 6 principles which guide the appropriate use, storage and processing of personal data. As a user of E-Start, you are expected to comply with each of these principles, which are listed below. We have provided some examples of how you might apply these principles to your work, but these are not intended to be exhaustive.

1. Personal data shall be processed fairly & lawfully
When we collect personal data, we must make it clear who we are, what we want to do with the information we want to collect and who we might disclose this information to.  In doing so, we will ensure we are processing personal data fairly.
 
Any personal data obtained, used, disclosed or destroyed (processed) must be done so lawfully. This means that we need to have a legal power enabling us to process personal information.  This is usually by way of consent from the data subject.
 
How can I comply as an E-Start user?  By ensuring that the consent wording as outlined in the example Children’s Centre Registration form is adhered to.  This provides appropriate permission and consent to use the information collected in line with the above principle.  Where appropriate, support should be provided to individual registering with the centre to ensure that true informed consent is obtained.

2. Personal data shall be processed for specified and lawful purposes and shall not be further processed in any manner incompatible with those purposes.
This means that we can only use someone’s information for the purpose(s) outlined in our ‘Notification’ and for the purpose(s) we stipulated at the time of collecting the information.  If we want to use personal data for another purpose, we must consult with the data subject, unless there is another legal power entitling us to process their information without their consent and it would be reasonable to do so.
 
How can I comply as an E-Start user?  By ensuring that the information is only processed and used for the purposes outlined in the example Children’s Centre Registration form. 
 
3.  Personal data shall be adequate, relevant and not excessive.
Individuals who collect and input personal data must ensure that the information is adequate, relevant and not excessive for the purpose for which it was obtained.  All computer and written entries must be clear in meaning and easily understood by others. Opinions should be clearly distinguishable from fact.  Individuals have a right of access to information held about them so all comments must be professionally worded.
 
How can I comply as an E-Start user?  Information collected by the example registration form has been checked to ensure that it is adequate, relevant and not excessive to inform the needs of running a Children’s Centre service (including review and performance management).  If users are asked by their manager/organisation to collect more information, they and their organisation should ensure that there is a justifiable reason for data collection.