DSapseid Posted December 5, 2017 Posted December 5, 2017 Ive just been having a discussion with our deputy head who is our 'GDPR School Champion' (MAT sorting most of GDPR) and we were discussing the educational websites that they use in departments and how they would work with GDPR. Think mymaths, collins connect, kerboodle, edmodo, plickers etc. Is my thinking that if they are EU based then in theory they should be ok to keep using? Edmodo is US based so I'm of the opinion that this needs to be stopped being used? Just want to double check my thinking before i annoy all the staff by telling them they cant use them anymore!
jmak Posted December 5, 2017 Posted December 5, 2017 (edited) Ive just been having a discussion with our deputy head who is our 'GDPR School Champion' (MAT sorting most of GDPR) and we were discussing the educational websites that they use in departments and how they would work with GDPR. Think mymaths, collins connect, kerboodle, edmodo, plickers etc. Is my thinking that if they are EU based then in theory they should be ok to keep using? Edmodo is US based so I'm of the opinion that this needs to be stopped being used? Just want to double check my thinking before i annoy all the staff by telling them they cant use them anymore! I wouldn't rule out a supplier just because they're US based. I'd they're currently operating in this country, they should already be meeting regulatory requirements for moving data offshore to process. It'll all come down to the DPA they put in place, but if be amazed if a company with as much presence as Edmodo isn't already working on it. If you have doubts, ask them. You may even find that a number of UK suppliers include offshore data processing in their DPA as some will use MS Azure or Amazon AWS... Edit: It might be worth checking here: https://www.edugeek.net/showthread.php?t=188142 (Edugeek thread on crowd sourcing GDPR information from suppliers) to see if anyone has already got the information. Edited December 5, 2017 by jmak
Seb1780 Posted December 6, 2017 Posted December 6, 2017 Ive just been having a discussion with our deputy head who is our 'GDPR School Champion' (MAT sorting most of GDPR) and we were discussing the educational websites that they use in departments and how they would work with GDPR. Think mymaths, collins connect, kerboodle, edmodo, plickers etc. Is my thinking that if they are EU based then in theory they should be ok to keep using? Edmodo is US based so I'm of the opinion that this needs to be stopped being used? Just want to double check my thinking before i annoy all the staff by telling them they cant use them anymore! Check existing DPA compliance here https://www.gov.uk/government/publications/cloud-software-services-and-the-data-protection-act - there is a list of "self certified" companies in the appendix.
GrumbleDook Posted December 8, 2017 Posted December 8, 2017 One of the good things about the introduction of GDPR is that it takes a risk-based approach. The location is not as important as it used to be as we have things like the EU Model Contract Clauses, ISO27000 series certification, etc. The DfE have their self-certified list, but that will need a slight update (which is only likely to happen once the DP Bill is closer to Royal Assent). Don't rule any supplier out until they have been given a chance.
witch Posted January 4, 2018 Posted January 4, 2018 I have been tasked with contacting all the companies we use re GDPR Props to Purple Mash who have it on their site - easily accessible and all info there. Pearson have got a good document to send out too. Others - not so much - OUP are "reviewing" the regs. Others have asked me to email but have had no responses as yet
enjay Posted January 5, 2018 Posted January 5, 2018 I have been tasked with contacting all the companies we use re GDPR Props to Purple Mash who have it on their site - easily accessible and all info there. Pearson have got a good document to send out too. Others - not so much - OUP are "reviewing" the regs. Others have asked me to email but have had no responses as yet Really? I found most of the information I needed for the DPIAs in companies' privacy policies...
witch Posted January 5, 2018 Posted January 5, 2018 Really? I found most of the information I needed for the DPIAs in companies' privacy policies... Not enough info for my boss - he wants them to state that they have considered GDPR etc etc
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now