Head in the Cloud

I seem to be spending much of my time talking to head teachers at the moment about GDPR (General Data Protection Regulation) which is implemented on May 25th 2018. It is an issue that is certainly vexing many. However it's not just GDPR per se, but around related issues in what schools can and cannot save in the cloud, and the usual 'Google isn't safe’ mantra that is still being trotted out by some. Let's look at the GDPR issue first. From discussions I’ve had, there seems to be a lack of good information or advice about exactly what this means for a school, especially primary schools that I mainly work with. Here’s a link to GDPR education section of the Information Commissioner's Office website. Here schools can find out more information about GDPR. However, what I would really like to see is some concise information coming out from local authorities, regional consortia or the Welsh Government. Spelling out simply (if that's possible) what head teacher