Storing Students Sensitive Personal Data on VLE

[KevByrne]

Hi All,

 

I have been asked whether we can use our VLE (My Learning) for teachers to store and then remotely access Excel documents containing student information such as grades, SEND information, ethnicity etc.

 

My initial reaction is no and that we should instead setup remote access for teachers onto our main network, however I wondered whether any other schools out there were using VLE's in this manner? My main concerns are with Data Protection and backup strategies, however any comments/thoughts would be appreciated.

 

Thanks All

Kevin Byrne

[LosOjos]

As long as it's a secure site (requires username and password, cannot be signed up to without verification (i.e. I couldn't register claiming to be one of your staff and gain access), uses https) and the server is in a country on the EU Safe Harbor list, it should be fine.

 

You have a responsibility however to make sure every possible precaution has been taken as regards to the safety of the data (so revoking staff logins when they leave, monitoring the platform for security updates) and that data is only available for as long as it is needed (so delete data for students who have left or data that is time relevant once that time period has passed)

[KevByrne]

Thanks LosOjos.