MAIL EXPRESS - non EU ?

[njr72]

Hi

Previously out LEA has told me that I can't use certain cloud services, as they are outside of the EU.

One example of something they told me was SurveyMonkey, but after doing some digging I think they are in the EU.

 

My LEA now wants me to use MAIL EXPRESS for sending "sensitive data" to them.

 

But from what I can see MAIL EXPRESS servers are in the US ?

 

Are there any clear rules on what cloud services can & cannot be used in a UK School ?

 

With thanks

[sparkeh]

Principle 8 of the DPA:

Personal data shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

However there is the Safe Harbour scheme: International Safe Harbor Privacy Principles - Wikipedia, the free encyclopedia which means, in theory, that US companies signed up are ok to use in view of the DPA.

 

People will argue whether using an organisation signed up to Safe Harbour really is that safe but that's a choice your school needs to make.

Edited June 4, 2015 by sparkeh