Statutory Governance: Equality, Data Protection, and Information Security Policy

2.0 Equality and Equal Opportunities

Elevated Futures Education is an inclusive institution. We possess a written policy that prevents unlawful discrimination and promotes equal opportunity for all staff, students, and stakeholders.

• Commitment: We actively celebrate neurodiversity as a source of professional and academic capital. Discrimination based on protected characteristics is prohibited.
• Implementation: All recruitment and staff management processes are subjected to audit to ensure they promote equity, fairness, and the validation of every individual’s inherent worth.

3.0 Information Security and Data Protection

In alignment with the DWP requirements, Elevated Futures Education is formally registered with the Information Commissioner and complies with all relevant data protection legislation.

3.1 Data Management and Confidentiality

• Registration: EFE maintains active registration with the ICO.
• Confidentiality Awareness: All data users are formally trained on the vital importance of confidential handling of information. This training is mandatory and subject to annual refresher cycles.
• Staff Statements: All employees are required to sign a confidentiality statement regarding the non-disclosure of sensitive information.

3.2 Physical and Digital Security

• Data Movement: Our data protection policy restricts the movement of data outside of secure environments. Hard copies containing sensitive information are not permitted to be transported unless in a secure, lockable container.
• Environment Security: All digital data is located in a room or environment that is secure and physically locked when not in use. Access is strictly controlled and reserved for authorised personnel only.
• System Overrides: Individuals who possess the ability to override system protections are explicitly aware of their heightened responsibilities and the importance of safeguarding data integrity.

3.3 Incident Management and Notification

• Named Contact: The Principal, Doreen Sinclair McCollin, is the named data security contact responsible for managing incidents and reporting breaches.
• Incident Procedure: EFE maintains clear, codified procedures to be followed in the event of misuse, loss, or unauthorized access of data.
• Notification: We agree to notify the relevant DWP contact point immediately of any suspected or actual unauthorized use or accessing of data.