First DfE video on GDPR

[enjay]

Sadly not the first time I've seen the DfE referring enquiries on this topic to Edugeek. Nice for the site, but not exactly a great response!

[GrumbleDook]

In days gone by EG, members, mods, admins and sponsors have sat in on a range of operational and strategic areas with folk like Becta and SSAT. Departments refer to BCS, IET, RA ... and now to EduGeek.

[maturelady]

No one, including the DfE, wants schools to be forced to appoint a DPO. At the moment EU law dictates it and when the Data Protection Bill is passed, the UK government will enforce it.

 

I have lobbied my MP to ask for the new data protection law to take into consideration the plight of schools. He has said he would do what he could but I'm not sure how empty those words are.

 

When the bill was in the House of Lords there was an amendment suggesting the removal of the mandatory need for a DPO in schools. Due to lack of time it wasnt debated. The bill has now passed to the Commons. This is the last opportunity to get the ruling changed. I'm not holding my breathe but I'm going to lobby again, I'm a born optimist. Perhaps Edugeek members can do the same?

 

The DfE can't do anything about the law - only make suggestions on how schools can address it. In the case of schools having to get a DPO there aren't many avenues to explore given the existing rules.

 

...and as for funding - you know the answer to that!

[tinkerbotsict]

Do you have any idea time frame wise when more stuff will be released from DFE?

[jenatddm]

No one, including the DfE, wants schools to be forced to appoint a DPO. At the moment EU law dictates it and when the Data Protection Bill is passed, the UK government will enforce it.

 

I have lobbied my MP to ask for the new data protection law to take into consideration the plight of schools. He has said he would do what he could but I'm not sure how empty those words are.

 

When the bill was in the House of Lords there was an amendment suggesting the removal of the mandatory need for a DPO in schools. Due to lack of time it wasnt debated. The bill has now passed to the Commons. This is the last opportunity to get the ruling changed. I'm not holding my breathe but I'm going to lobby again, I'm a born optimist. Perhaps Edugeek members can do the same?

 

The DfE can't do anything about the law - only make suggestions on how schools can address it. In the case of schools having to get a DPO there aren't many avenues to explore given the existing rules.

 

...and as for funding - you know the answer to that!

 

You can't easily lobby against something that's part of the law which is supposed to bring improvement on the status quo, without an alternative. What's the alternative?

[GrumbleDook]

You can't easily lobby against something that's part of the law which is supposed to bring improvement on the status quo, without an alternative. What's the alternative?

 

Bringing it in line with existing school governance, but making it easier to bring in specialist support when needed... as happens at the moment in other areas of school life.

 

Rather than say schools are doing it wrong (which many are) and then give them almost impossible hurdles, we need to support them.

 

There are some good DPO services that are trying to be light touch once schools have gotten themselves into shape, and this is could be a really good model ... but it relies on using the existing governance structure to support it.

[jenatddm]

Bringing it in line with existing school governance, but making it easier to bring in specialist support when needed... as happens at the moment in other areas of school life.

 

Rather than say schools are doing it wrong (which many are) and then give them almost impossible hurdles, we need to support them.

 

There are some good DPO services that are trying to be light touch once schools have gotten themselves into shape, and this is could be a really good model ... but it relies on using the existing governance structure to support it.

 

Still unclear what's the alternative to 'every school should have a nominated, conflict-free, resposible DPO.'

 

1. Tell me in a paragraph what the law should say instead of what it does now. How would it change the status quo for the better.

 

2. What are your "almost impossible hurdles"?

 

3. What we're working on is guidance to support. I believe the ICO needs to issue a code of practice specific to education so as to give clarity and confidence to both schools and suppliers, and enable children, parents and staff to know their rights and any limitations, and schools, staff and providers to know their own rights and their responsibilities. If you were to want *this* ICO guidance to be specific to education, what woiuld be different, added or missing? https://ico.org.uk/media/about-the-ico/consultations/2172913/children-and-the-gdpr-consultation-guidance-20171221.pdf Then see page 25-26 amendment 117 and see if that would cover it or needs something else>> https://publications.parliament.uk/pa/bills/lbill/2017-2019/0074/18074-I.pdf

 

Interested in all your views on this.

 

[maturelady]

I've been told that a realistic timescale for the next video is mid March.

 

This one will be a joint production with ICO I believe.

 

Retention and explaining the legal basis for processing will be included.

 

Training every member of staff to bring home the message that DP is everyone's responsibility is a key part of a school's GDPR preparations. I've asked the DfE to produce a video for this purpose, every school needs it. They made no promises but did warm to the idea. If I hear its a 'goer' I'll report back.

[maturelady]

@jenatddm we're taking this thread off-piste. It's supposed to be feedback and new ideas relating to the current and future GDPR videos from the DfE.

@GrumbleDook and I would be delighted to discuss the progression of the DP bill in Parliment and our related concerns in a different place.

[jenatddm]

This one will be a joint production with ICO I believe.

 

Sounds good.

[Ditto]

Hopefully remaining on-piste... I spoke to the chaps on the DofE stand at BETT on the GDPR topic and that video. The suits and vibe really did not seem in keeping with the rest - oops, sorry off-piste! More seriously though, I asked when they thought the next communication was likely. They really did not have any idea. What was enlightening, is that they said they are still in the early throes of understand the DPA/GDPR requirements themselves and are only starting to receive training now. They did acknowledge schools needs for guidance. What they pointed out is the expertise lay in a different department/sector (I think they said STA, but may have misheard). They hoped this expertise would filter down to them in due course and then they can pass on to schools.

[jenatddm]

@jenatddm we're taking this thread off-piste. It's supposed to be feedback and new ideas relating to the current and future GDPR videos from the DfE.

@GrumbleDook and I would be delighted to discuss the progression of the DP bill in Parliment and our related concerns in a different place.

 

Sure, agree apologies bit off piste but just ging further along the line of replies of finding out and how to best deliver guidance what ppl want to know. I guess the point is not to produce good videos per se, but help school staff deliver better data practice. I'd like to hear your views, you have my email, but also more views than only you two, as I think what's misisng is a consistent and clear guidance accessible to all (a code of practice).

 

IMO the videos should be tied into themes and practical guide "how to" not just "what to" do. But there's perhaps a conflict for you if it should be free to all, not trying to sell a product. The headings mentioned in the film are unclear, it's a bit wooly. What headings should a school be pulling out of this for mapping? They should appear on the screen, and have an accompanying download document. That's gist of the feedback I gave DfE.

[jenatddm]

Yep, their data team ppl. hadn't read it last July even. Like many others. But let's not focus on gaps. If you also acknowledge schools need guidance, I hope we could get a consistent note together on what is needed and present it to DfE and ICO (as above off piste) and ask MPs to support a simple clause in the Data Proection Bill to require ICO to deliver that code of practice for consistency and clarity and confidence across the sector. Do email me if you want to help shape via jen at defenddigitalme.com

[enjay]

IMO the videos should be tied into themes and practical guide "how to" not just "what to" do.

 

Agreed, 100%. That's the kind of guidance we're needing know as I think most of us are up on the gist of what needs doing, and those who aren't up on that yet there's already plenty of resources out there, we don't need more.