Query about a privacy policy

[localzuk]

Just a quick one - what do people think of this privacy policy? I'm considering asking our DPO about it, as I'm a little unsure of their using "Pupil information" and "Staff information" as types of personal data they collect - they seem far too generic and don't really say what they collect in there. Surely it should be "pupil assessment data" "pupil attendance data" "pupil behaviour data" etc... The request in Wonde basically slurps everything it can.

https://theheadteachersreport.com/data-protection-privacy-policy/

What do you guys and gals reckon?

Edited July 18, 2019 by localzuk

[elsiegee40]

Should there be an attachment to this @localzuk?

[localzuk]

Oops. Added link.

[bobsmith]

When you say the request in Wonde slurps up everything have you actually got this software already and been on to the wonder user account to see?

 

I'm being slightly facetious as from my current dealings with Wonde they do tend to slurp everything you give them access to.

[localzuk]

I have access to the Wonde organisation dashboard, so can see the request from The Headteacher's Report for access to the system - and can see all the categories of data they want to access.

 

I'm not worried about the Wonde side of things, more about the Privacy Policy provided by THR.

[enjay]

Two things:

 

1 - definitely check with your DPO, that's what they're for. Also, if the brown stuff hits the fan later and you end up having to say "no, I didn't check with the data protection specialist we pay, I took a punt myself" it could end badly

2 - "student information" is definitely too vague. That could be reg group and it could be SEN status or medical info. They do say they don't collect anything which could uniquely identify a person, though.

[localzuk]

Yeah, I've referred it to my DPO anyway.

 

Looking at their Wonde request - they have access to identification information - lots of it.