GDPR - IT Helpdesks

[tj2419]

Just had a thought about GDPR and helpdesks.

 

If we have to do an audit of all information where it goes which third parties are involved etc. Are IT helpdesks an area that may slip through the net? If a member of staff forwards a document with student information to the helpdesk then this is putting it at the third parties mercy. Does this mean we will also only be able to use helpdesk providers who are GDPR compliant? Is there an easy way to find out if the likes of Spiceworks, Freshdesk etc are?

 

Would it be worth us setting up somewhere on edugeek where we can have a list of third party companies and a link to prove they are GDPR compliant?

[GrumbleDook]

If you take a look at the likes of ZenDesk, they are already updating their privacy policy to take into account what is known on GDPR.