Is this GDPR compliant?

[MkII]

We've had this as part of a template for schools to adopt for pupils to use the Welsh Government site HWB. Pupils have to login to use the upcoming mandatory numeracy and literacy tests, which require no permissions. The additional services (Office365, GStuite, j2e (itself serving a host of other applications etc)) require parental permissions.

 

I wonder if the various platforms should be granted permission individually rather than with a cover all once signature. Am I wrong??

 

"Additional services

 

If you agree, Welsh Government can also provide [you/your child] with access, via the Hwb platform, to a variety of additional services which are provided by other organisations. These include online learning environments such as Hwb Classes, Microsoft Office 365, Google for Education, and other relevant educational tools and resources. Welsh Government is making these additional services available to help [you/your child] access educational resources. These additional services are centrally funded and there is no cost for you or for your school to access and use them."

[3s-gtech]

From our looking at it, we had to add a separate consent box just for this service - so our staff and student AUPs have an extra box for this.

[enjay]

If you're going to use HWB, Google, etc. for other things within the teaching & learning, you won't need consent.

 

If you do go down the consent road, I think you'll need consent for each one separately so a parent can consent to HWB but not Google.

 

Nice to see they're giving you Google Apps free-of-charge, I'd be concerned if they charged you for it!

[MkII]

 

Nice to see they're giving you Google Apps free-of-charge, I'd be concerned if they charged you for it!

 

Haha yes!

[PotNoodleTech]

We are already using our own Google and Office365 tenancy and it's fully embedded in our daily life so we chose not to move to the HWB for any of the extras they offer (extras that we have been using for years). We will just use it for pupils to access the national tests, and thus no extra permissions required AFAIK.

[MkII]

...and thus no extra permissions required AFAIK.

 

Yep that's how I read it.

 

Don't see the need myself. We're already signed up for GSuite. The LA bought O365 for us. j2e seems to be for primary schools...

[GrumbleDook]

We've had this as part of a template for schools to adopt for pupils to use the Welsh Government site HWB. Pupils have to login to use the upcoming mandatory numeracy and literacy tests, which require no permissions. The additional services (Office365, GStuite, j2e (itself serving a host of other applications etc)) require parental permissions.

 

I wonder if the various platforms should be granted permission individually rather than with a cover all once signature. Am I wrong??

 

"Additional services

 

If you agree, Welsh Government can also provide [you/your child] with access, via the Hwb platform, to a variety of additional services which are provided by other organisations. These include online learning environments such as Hwb Classes, Microsoft Office 365, Google for Education, and other relevant educational tools and resources. Welsh Government is making these additional services available to help [you/your child] access educational resources. These additional services are centrally funded and there is no cost for you or for your school to access and use them."

 

I'm trying to work out who is saying that the additional services require parental permission (i.e. consent).

[PotNoodleTech]

WAG. I'll dig it out for you.

[Bionic]

And....isn't there something in GDPR that states nobody should be disadvantaged by not agreeing to consent? Telling users that they will not be able to access resources that aid in teaching and learning if they don't consent seems to go against this does it not?

[PotNoodleTech]

https://hwb.gov.wales/consent

[enjay]

And....isn't there something in GDPR that states nobody should be disadvantaged by not agreeing to consent? Telling users that they will not be able to access resources that aid in teaching and learning if they don't consent seems to go against this does it not?

 

That possibly only applies to things the school is using across all students, not optional things being offered by someone else.

[3s-gtech]

And....isn't there something in GDPR that states nobody should be disadvantaged by not agreeing to consent? Telling users that they will not be able to access resources that aid in teaching and learning if they don't consent seems to go against this does it not?

The additional services won't affect T&L particularly, when you look at those services, as they can (mostly) be obtained for free by schools anyway. https://hwb.gov.wales/additional-services

[Bionic]

The additional services won't affect T&L particularly, when you look at those services, as they can (mostly) be obtained for free by schools anyway. https://hwb.gov.wales/additional-services

 

It does here. Microsoft Office 365 is heavily embedded in the curriculum, to the point where the teachers could not teach effectively without it.

[3s-gtech]

Yes, but it's still available, for free, without needing to use Hwb or ask for this separate consent.

[Bionic]

Yes, but it's still available, for free, without needing to use Hwb or ask for this separate consent.

 

It's available for free if you setup and use your own Microsoft tenant. SLT here have mandated that we are to use the HWB tenant and nothing else so we have no other option. The majority of our teaching resources have been uploaded to the HWB Microsoft tenant, this was done before Welsh Assembly Government started asking for consent, which started happening I think in September last year, long after GDPR implementation. If staff here do not consent to using the additional services they are unable to do their job effectively. If pupils here do not consent they will be unable to access the majority of learning resources. So staff and pupils have no option but to consent. That is the part that I feel contravenes the part in the GDPR that says users should not be disadvantaged by not giving consent. Or words to that effect.

[3s-gtech]

*sigh*

That's the case in your particular school. In which case - of course, you must not disadvantage your students. You'll need to look carefully into how you manage your consent. Now, stop picking a fight. Most other schools in Wales are not as strict on using Hwb alone (the joy of multiple logons are to blame there) and so would be covered by their regular A1 entitlement. We use Hwb, but we have our own tenancy too.

[PotNoodleTech]

It's available for free if you setup and use your own Microsoft tenant. SLT here have mandated that we are to use the HWB tenant and nothing else so we have no other option. The majority of our teaching resources have been uploaded to the HWB Microsoft tenant, this was done before Welsh Assembly Government started asking for consent, which started happening I think in September last year, long after GDPR implementation. If staff here do not consent to using the additional services they are unable to do their job effectively. If pupils here do not consent they will be unable to access the majority of learning resources. So staff and pupils have no option but to consent. That is the part that I feel contravenes the part in the GDPR that says users should not be disadvantaged by not giving consent. Or words to that effect.

 

Staff do not need to give consent to use HWB or any extra part of HWB.

 

Only pupils, and only if they are going to do more than use the HWB for just the national tests.

[Bionic]

*sigh*

That's the case in your particular school. In which case - of course, you must not disadvantage your students. You'll need to look carefully into how you manage your consent. Now, stop picking a fight. Most other schools in Wales are not as strict on using Hwb alone (the joy of multiple logons are to blame there) and so would be covered by their regular A1 entitlement. We use Hwb, but we have our own tenancy too.

 

Not trying to pick a fight, simply trying to gather opinion from the community on our scenario. Apologies if it came across any other way.

[AndyCrow]

I personally dont think the Welsh Govt should be using Consent as the lawful basis for processing the data.