Use of UPN by third party sites
I'm trying to figure out what the rules on use of the UPN as a unique identifier are within the context of third party sites (eg. hosted services such as I Am Learning, Sam Learning etc...).
As far as I can see, the rules/guidance classifies the UPN as a sensitive piece of information and also states that it should simply not be routinely used, except in the cases of transferring pupils to new schools and for passing information up to LEAs and central departments.
So, it all leads me to believe that we should not be using the UPN if sending information to sites such as those mentioned? Thoughts?