Acceptable use policy

[Badaz52]

Hi everyone,

 

As a conflict of interest query, should our DPO be customising the schools ICT acceptable use policy?

 

Thanks!

[rom1984]

Your DPO shold be involved, closely, in all data protection matters. So I'd personally expect a DPO to be involved in the writing/improvement of the AUP, especially modifying it to reflect DP compliance.

 

In a perfect work I'd expect something like business manager, DPO, safe guarding link and IT to be involved in it with SLT providing ultimate sign off.

[enjay]

AUP isn't just about data protection, so the DPO shouldn't be writing it exclusively, but they should definitely be involved, along with IT Manager, Business Manager and HT.