GDPR and Exam bodies

[Sylv3r]

Every exam board we have contacted have basically said they are working towards being GDPR complant by May 25th and something will be shared with all customers nearer the time. Literally two lines on an e-mail and that's for the ones that have actually bothered replying...

[mavhc]

Meanwhile:

 

No results found for site:ocr.org.uk "general data protection regulation". 1 for site:ocr.org.uk "gdpr" that's not interesting.

[ozydave]

I called AQA Tuesday this week. Still waiting for them to call back with an answer

[3s-gtech]

Meanwhile, WJEC have heard of these new-fangled 'compootors' and would like to know what they do.

[free780]

Pearson have a secure upload site. However with the need for video I can see bandwidth and storage costs for the exam boards increasing.

[jthompson]

I can't remember which one it is, but one of the main exam boards had stated that they wouldn't be GDPR compliant until something like March 2019.

[theeggmaster]

AQA have just replied to us and said that they'd be happy to receive encrypted data sent on a memory stick using BitLocker, and the password can be emailed to them separately. Seems sensible enough.

[benIT]

AQA have just replied to us and said that they'd be happy to receive encrypted data sent on a memory stick using BitLocker, and the password can be emailed to them separately. Seems sensible enough.

 

Same for me today. Spoke to their Helpdesk who said they don’t recommend encryption as it “slows their Team down” , the chap I spoke to wasn’t aware of DPA or GDPR in any detail ! #joke

[mavhc]

AQA have just replied to us and said that they'd be happy to receive encrypted data sent on a memory stick using BitLocker, and the password can be emailed to them separately. Seems sensible enough.

 

Can you ask them to put that info on their website, also what version of encryption, etc. And their pgp key so you can encrypt the email you're sending them.

[djrscally]

And their pgp key so you can encrypt the email you're sending them.

 

If only.

[theeggmaster]

Can you ask them to put that info on their website, also what version of encryption, etc. And their pgp key so you can encrypt the email you're sending them.

 

They just mentioned BitLocker, which by default is AES-128.

[mavhc]

Bitlocker likes to ask if you want the latest Windows 10 encryption, or compatible.

[jthompson]

Can you ask them to put that info on their website, also what version of encryption, etc. And their pgp key so you can encrypt the email you're sending them.

 

That would be amazing! Makes me think that setting up a protonmail account for the school would be useful for this sort of thing. (https://protonmail.com/support/knowledge-base/encrypt-for-outside-users/). It'll take attachments up to 25MB iirc, and you can specify a time limit, too.

[mavhc]

That would be amazing! Makes me think that setting up a protonmail account for the school would be useful for this sort of thing. (https://protonmail.com/support/knowledge-base/encrypt-for-outside-users/). It'll take attachments up to 25MB iirc, and you can specify a time limit, too.

 

Don't really want to download the encryption code from the same people who are storing the email though.

[theeggmaster]

That would be amazing! Makes me think that setting up a protonmail account for the school would be useful for this sort of thing. (https://protonmail.com/support/knowledge-base/encrypt-for-outside-users/). It'll take attachments up to 25MB iirc, and you can specify a time limit, too.

 

You could use Google Drive, set a time limit, prevent them from sharing it further, prevent downloading, printing and copying. No file size limit and end-to-end encrypted.

[enjay]

You could use Google Drive, set a time limit, prevent them from sharing it further, prevent downloading, printing and copying. No file size limit and end-to-end encrypted.

 

The time-limited sharing needs people to have Google accounts though.

[theeggmaster]

The time-limited sharing needs people to have Google accounts though.

 

Or you could just put a reminder in your calendar and remove the sharing from the doc on that date.

[mavhc]

Most people online have a google account, or 6

[theeggmaster]

Most people online have a google account, or 6

 

It's free to set up, so it could be one of their requirements for moderating work.

[jthompson]

You could use Google Drive, set a time limit, prevent them from sharing it further, prevent downloading, printing and copying. No file size limit and end-to-end encrypted.

 

That assumes that you know the final recipient. If you're just sending to an exam board, they'll presumably need to then pass it on as they see fit. You could share using "get shareable link", but then the URL would be being sent unencrypted.

[theeggmaster]

That assumes that you know the final recipient. If you're just sending to an exam board, they'll presumably need to then pass it on as they see fit. You could share using "get shareable link", but then the URL would be being sent unencrypted.

 

Yes, and when the moderator tries to access the link that has been sent from the exam board, the owner of the file will get a request for access.

[gillp]

We use A2C for communicating with exam boards

[mavhc]

You'd hope the exam boards would have secure communications between themselves and their contract workers. You'd be surprised if they did, but you'd hope.

[enjay]

You'd hope the exam boards would have secure communications between themselves and their contract workers. You'd be surprised if they did, but you'd hope.

 

They do, but that's not quite the same thing as giving schools access to those systems to upload exam papers, etc. Plus they'd probably prefer us to pay for memory sticks than them pay for all the storage space needed.

[theeggmaster]

Pearson have just confirmed with our Exams Officer that they are happy to receive videos if it is encrypted on a DVD, and the password emailed separately.