Staff only access to subscriptions - to DPIA or not to DPIA?

[enjay]

Do we need to do DPIAs on sites which only staff members are using subscribing to, or just ones which involve student data changing hands?

[forkies]

Anything that has personal data. Not just student data, you must include anything that uses personal data about anyone (parents, staff, students, volunteers, visitors, etc)

[enjay]

Anything that has personal data. Not just student data, you must include anything that uses personal data about anyone (parents, staff, students, volunteers, visitors, etc)

 

And if the only personal data used in the staff member's email address, which they choose to enter themselves?

[GrumbleDook]

If the site is paid for by the school, the staff are either instructed or suggested they should use it, or they need to use it to do part of their job (e.g. exam boards to get resources, specification and so on) then it is not a choice.

[enjay]

If the site is paid for by the school, the staff are either instructed or suggested they should use it, or they need to use it to do part of their job (e.g. exam boards to get resources, specification and so on) then it is not a choice.

 

Agreed. Except for the bit about suggestion - I get how the school may be responsible for that if the person suggesting it is Leadership or does so in an organised training event, it would of course be impossible for me to know what services staff are recommending to each other. Or happening to find themselves, of course (and possibly even pay for themselves).

[GrumbleDook]

When I say ‘school’ you are correct when you say Leadership. It is someone with authority to make, or help others make decisions.

That could be SLT, HoD, line manager, mentor (thinking about ITT/NQT).

 

Staff simply sharing ideas would not really count.