TMBS Posted March 13, 2019 Posted March 13, 2019 Hi I wonder if anyone can point me in the direction of some formal advice regarding sharing student data via our school Google email/Gdrive. Our Safeguarding officer constantly quotes that we are not allowed to share any information regarding students electronically. She can't tell us where she has got this advice from, it's just NOT allowed! Our SENCO wants to get feedback about students via a shared Google doc, as it is much quicker and efficient. As far as I'm concerned it is GDPR compliant and encrypted, so much secure method than pieces of paper that can be left lying around. Does anyone know of this rule of not sharing data electronically? Can anyone see any reason why we cannot use our school Google account? Thanks
TMBS Posted March 13, 2019 Author Posted March 13, 2019 What does your DPO say about this? That's it's okay to do...
mavhc Posted March 13, 2019 Posted March 13, 2019 Hi I wonder if anyone can point me in the direction of some formal advice regarding sharing student data via our school Google email/Gdrive. Our Safeguarding officer constantly quotes that we are not allowed to share any information regarding students electronically. She can't tell us where she has got this advice from, it's just NOT allowed! Our SENCO wants to get feedback about students via a shared Google doc, as it is much quicker and efficient. As far as I'm concerned it is GDPR compliant and encrypted, so much secure method than pieces of paper that can be left lying around. Does anyone know of this rule of not sharing data electronically? Can anyone see any reason why we cannot use our school Google account? Thanks Obviously there's no such rule, as everyone does it. It's all about managing risk. Don't leave paper out, don't allow sharing of documents outside what's required. If no one external needs access, then block the possibility of external access. Make sure accounts have 2FA so the bar for a 3rd party stealing your credentials is higher.
GrumbleDook Posted March 13, 2019 Posted March 13, 2019 Erm ... if there is a concern then perform a DPIA and then make a decision. I honestly cannot remember seeing anything that says you cannot use a particular cloud service ... only that you have to be mindful of how you set it up, how you provide access and so on. 1
enjay Posted March 14, 2019 Posted March 14, 2019 Our Safeguarding officer constantly quotes that we are not allowed to share any information regarding students electronically. She can't tell us where she has got this advice from, it's just NOT allowed! It's worrying this level of misinformation about GDPR is still out there.
TMBS Posted March 14, 2019 Author Posted March 14, 2019 It's worrying this level of misinformation about GDPR is still out there. She's been quoting it for years, pre-GDPR. I think another IT illiterate person quoted it as a Safeguarding training session so it's now seen as gospel...
enjay Posted March 14, 2019 Posted March 14, 2019 She's been quoting it for years, pre-GDPR. I think another IT illiterate person quoted it as a Safeguarding training session so it's now seen as gospel... That makes it even worse!
GrumbleDook Posted March 14, 2019 Posted March 14, 2019 She's been quoting it for years, pre-GDPR. I think another IT illiterate person quoted it as a Safeguarding training session so it's now seen as gospel... If she cannot present evidence of this being an instruction or statutory guidance then you cannot follow it. It is hearsay and unbelievably damaging. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now