How to Make Your Database GDPR Compliant

https://www.hallaminternet.com/how-to-make-your-website-gdpr-compliant/

1. Forms: Active Opt-In

Forms that invite users to subscribe to newsletters or indicate contact preferences must default to “no” or be blank. You will need to check your forms to ensure this is the case.

2. Granular Opt-In

The consent you are asking for should be set out separately for accepting terms and conditions, and acceptance of consent for other ways of using data. Users should be able to provide separate consent for different types of processing.

3. Easy to Withdraw Permission or Opt-Out

It must be just as easy to remove consent as it was to grant it, and individuals always need to know they have the right to withdraw their consent. In terms of your web user experience, this means unsubscribing could consist of selectively withdrawing consent to specific streams of communication.


4. Named Parties

Your web forms must clearly identify each party for which the consent is being granted. It isn’t enough to say specifically defined categories of third-party organizations. They need to be named.


5. Privacy Notice and Terms and Conditions

The Information Commissioner’s Office (ICO) has very kindly provided a sample privacy notice that you can use on your website. It is concise, transparent, and easily accessible. You will also need to update your terms and conditions on your website to reference GDPR terminology. In particular, you will need to make it transparent what you will do with the information once you’ve received it, and how long you will retain this information both on your website and also by your office systems.

Good and bad examples of Privacy Notices:
https://ico.org.uk/media/for-organisations/documents/1625136/good-and-bad-examples-of-privacy-notices.pdf

For your reuse:


6. Children under age of 16

Because individuals will only be able to give consent if they are over 16 years old, you should ensure that the person providing the consent is the holder of parental responsibility over the child.


See also
DAT   
PCR Educator K-12 School Information System is an online database engineered for independent and private schools to deliver the highest level of flexibility, unique experience, transparent communication and customized design. Being a complete cloud-based solution, PCR Educator system guarantees convenient access anytime, anywhere.