While full guidance is provided in the 9 Steps for Methodist Managing Trustees to Take Now to Comply with GDPR Focus Note (9 Steps), this checklist summarises the practical steps for Local Churches, Circuits and Districts to take and continue taking to help them look after the personal information (data) they collect and use now that the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 are in force.
Whether the personal information belongs to Church members, their families, employees or third parties who use church premises it is in the interests of everybody to ensure that the information is looked after carefully and kept safe. Taking these nine steps will help Managing Trustees to do that.
Please read this checklist and the 9 Steps Focus Note together with the toolkit of policies, templates, guidance and training being produced by the Data Protection Working Party (Working Party) to help Managing Trustees understand how to practically comply with the requirements of GDPR.
In this Checklist:
Privacy Notice is the Managing Trustees’ Privacy Notice produced by the Working Party.
GDPR is the General Data Protection Regulation.
Working Party is the Data Protection Working Party comprising representatives of TMCP and the Connexional Team.