Tapestry lets parents download video - potential safeguarding issue

[hallb15]

We use Tapestry in Early Years and on the whole it is a great product. Staff love the ease of logging observations, including photos and videos of children in action, completing various targets etc.

Parents have controlled access to their child's observations so can see how they are progressing. This includes access to photos and videos that have been uploaded to their child's Tapestry profile.

 

Within the Tapestry settings there is an option to disable downloads so that parents can't download photos or videos from their child's profile. However, disabling downloads only removes the download button. There's nothing to stop the parent from right-clicking and downloading the photo or video.

 

Most photos and videos taken in the classroom will have more than one child in, especially videos as children - particularly in Early Years - do not keep still. So despite the best efforts of the staff taking the image, there will be children clearly viewable who aren't the focus of the observation.

 

So a parent could easily right-click and save a file to send to a relative and then its outside our control what happens to it next.

 

Has anyone else noticed this?

We will be reporting it to Tapestry today and I'll update here with their response.

[hallb15]

For those that are interested, Tapestry's response was pretty dismissive. There's nothing they can do about it.

[Katy]

I can't see as it being possible to stop them saving any image shown on screen (if they disable the save menu option what's to stop screenshot/snippingtool coming out), however... last time I had a play on iris connect it appeared to be impossible to download the video, so I guess there's a way that could be done if they wanted to change how the video was delivered.

[bald_pig]

If you're already letting parents see other pupils in photos aren't you already breaching gdpr anyway?

[Ditto]

The exact point I was about to make by @Katy. I think you have to decide if you want share the pictures/videos knowing they could be copied. Then it's a case of completing a risk assessment then informing parents on the decision. The risk assessment will need to take into account if there are vulnerable children likely to appear in the video.

[hallb15]

Its with our DPO now to see what their take on it is.