Lockable... Bag?

[Gongalong]

Hi folks,

 

We need something lockable to take sensitive documents e.g. student medical data, on school trips.

 

I'm thinking something as minimal as possible, of course it just needs a lock on it.

 

Has anyone come across something that fits the bill?

 

I don't want a briefcase because of the extra bulk, almost a lockable document wallet. Not finding anything that really fits the bill at Amazon.

 

Thanks

[Rob_D]

What about this? Or is it too small?

 

https://www.amazon.co.uk/Master-Lock-7120D-Locking-Security/dp/B000SQQGF4/ref=pd_lpo_sbs_229_img_0?_encoding=UTF8&psc=1&refRID=HH4J5WPVSTQ2DYE18EG7

[3s-gtech]

Is there much point if it can be cut open with scissors?

[LeMarchand]

Is there much point if it can be cut open with scissors?

 

I think it's more a deterrent than anything. It wouldn't take much to get into most briefcases.

 

I got:

https://www.amazon.co.uk/Document-Passport-Tickets-Travellers-Insurance/dp/B001U4B4JQ/

https://www.amazon.co.uk/Lockable-German-Writing-Organiser-Tropentarn/dp/B00J5ESFVS/

https://www.amazon.co.uk/Document-Material-Gussetted-Lockable-Twotone/dp/B00WZ17QP4

 

also try "lockable a4 portfolio case" on eBay.

[Gongalong]

What about this? Or is it too small?

 

https://www.amazon.co.uk/Master-Lock-7120D-Locking-Security/dp/B000SQQGF4/ref=pd_lpo_sbs_229_img_0?_encoding=UTF8&psc=1&refRID=HH4J5WPVSTQ2DYE18EG7

That looks ideal, thanks!

 

@3s-gtech It's all about deterring the "casual browser", and to know the data has been compromised, as I understand it. A filing cabinet will just take a screwdriver.

[DalekSec]

At my old gaff, we had trip iphones which were encrypted and they had all the trip details on like risk assessments as PDFs.

 

Obviously iPhone has a lock on it. Teachers loved it, as they didnt have to carry a ton of paperwork around with them

[Gongalong]

A bit of BYoD should be OK for that, as long as the devices are locked, and it gets cleared off afterwards.

[DSapseid]

Im looking into using an old ipad mini that we have lying around as its to old for most of the apps due to it not taking the latest version of ios. But it will be fine for accessing a pdf file with all the students information in.

 

Must get a case for it though that can be dropped as i know it will come back in lots of pieces after the first trip if i dont!!

 

This also helps with what happens to the documents after the trip, has the trip person put the paper in the confidential waste bin or shredder? Now we can just delete the file.

 

Will probably look to use OneDrive for storing the files or email the pdf as an attachment.

[ThatBoringBloke]

https://www.trustbag.com/

 

Can't get much more secure.

 

Bit pricey for a bag though!

[Gongalong]

Having bought the bag, staff have now pointed out that on big trips (60+ students) they have to take passports, copies of passports, and other contact information, so the volume of information can be sizeable.

 

What do other schools do in this situation? Is it enough that if you keep the documents with you they're considered secure, or do they need to be with you and locked away?

[LeMarchand]

Having bought the bag, staff have now pointed out that on big trips (60+ students) they have to take passports, copies of passports, and other contact information, so the volume of information can be sizeable.

 

Which no-one thought to mention before the research/purchase?

[Gongalong]

Yes... *fume*

 

Also eye rolling from staff on the need to keep information locked away. One of the frustrating aspects of being a DPO.

 

But are the ICO super clear about this requirement? I've seen "educational organisations" with undertakings for leaving sensitive documentation unattended, is there a specific requirement to always lock sensitive data away when not being used? I can feel a call to the ICO helpline coming on...

[pete]

Maybe look at the slimline Pelican laptop cases?

[Gongalong]

I rang the ICO helpline, and suffice to say the ball's in our court, although I can somewhat understand why. It only becomes an issue if we are viewed as not having protected the hardcopy sufficiently, so if the staff member kept the hardcopy with them it wouldn't be an issue. If they left it in a car, or a similar environment, then that would be an issue (as previous Undertakings have shown).