Documentation needed - Data Protection Action Plan

[Arielle-Bennett]

Context

• We need a data protection action plan for The Turing Way overall project as part of the Turing Institute's project governance documentation requirements
• Can find the templates on Mathison
• We have DPAPs which cover parts of the project but not one for the whole thing

Next steps / actions

• @Arielle-Bennett to scheduled in co-working time with @aleesteele
• @aleesteele to collate and share any relevant notes from ongoing discussions with Data Protection team at the Turing ahead of the meeting
• First draft to be reviewed and submitted to Data Protection by 30 April

[aleesteele]

Thanks @Arielle-Bennett! Adding in breadcrumbs to here, and also added it the project board (which is primarily what I use for keeping track of tasks): the-turing-way/the-turing-way#3534

[aleesteele]

Flagged with Arielle, but adding a note here as well. Had a discussion with Kit about how to collate notes around GDPR and DPP's more broadly for the project on 5 April. Created a (closed) HackMD to log osome of these notes, which we will open more broadly once the wording and information is more clear!

[aleesteele]

16 April:

• Reviewing the Data Protection Assessment Process (DPAP) with @Arielle-Bennett
• Established forms & processes that we'll undergo at the Turing level
• Will think through process of data protection for an open source community (maybe a policy? other resources?)

[aleesteele]

Update from RACI matrix: this should be put in place by the end of October