Sending Student Info via email/GDrive

[TMBS]

Hi

 

I wonder if anyone can point me in the direction of some formal advice regarding sharing student data via our school Google email/Gdrive.

 

Our Safeguarding officer constantly quotes that we are not allowed to share any information regarding students electronically. She can't tell us where she has got this advice from, it's just NOT allowed!

 

Our SENCO wants to get feedback about students via a shared Google doc, as it is much quicker and efficient. As far as I'm concerned it is GDPR compliant and encrypted, so much secure method than pieces of paper that can be left lying around.

 

Does anyone know of this rule of not sharing data electronically? Can anyone see any reason why we cannot use our school Google account?

 

Thanks

[LukeRowberry]

What does your DPO say about this?

[TMBS]

What does your DPO say about this?

That's it's okay to do...

[mavhc]

Hi

 

I wonder if anyone can point me in the direction of some formal advice regarding sharing student data via our school Google email/Gdrive.

 

Our Safeguarding officer constantly quotes that we are not allowed to share any information regarding students electronically. She can't tell us where she has got this advice from, it's just NOT allowed!

 

Our SENCO wants to get feedback about students via a shared Google doc, as it is much quicker and efficient. As far as I'm concerned it is GDPR compliant and encrypted, so much secure method than pieces of paper that can be left lying around.

 

Does anyone know of this rule of not sharing data electronically? Can anyone see any reason why we cannot use our school Google account?

 

Thanks

 

Obviously there's no such rule, as everyone does it. It's all about managing risk. Don't leave paper out, don't allow sharing of documents outside what's required. If no one external needs access, then block the possibility of external access. Make sure accounts have 2FA so the bar for a 3rd party stealing your credentials is higher.

[GrumbleDook]

Erm ... if there is a concern then perform a DPIA and then make a decision.

 

I honestly cannot remember seeing anything that says you cannot use a particular cloud service ... only that you have to be mindful of how you set it up, how you provide access and so on.

[enjay]

 

Our Safeguarding officer constantly quotes that we are not allowed to share any information regarding students electronically. She can't tell us where she has got this advice from, it's just NOT allowed!

 

It's worrying this level of misinformation about GDPR is still out there.

[TMBS]

It's worrying this level of misinformation about GDPR is still out there.

She's been quoting it for years, pre-GDPR. I think another IT illiterate person quoted it as a Safeguarding training session so it's now seen as gospel...

[enjay]

She's been quoting it for years, pre-GDPR. I think another IT illiterate person quoted it as a Safeguarding training session so it's now seen as gospel...

 

That makes it even worse!

[GrumbleDook]

She's been quoting it for years, pre-GDPR. I think another IT illiterate person quoted it as a Safeguarding training session so it's now seen as gospel...

 

If she cannot present evidence of this being an instruction or statutory guidance then you cannot follow it. It is hearsay and unbelievably damaging.