Displaying Student Medical Information

[paulkerton]

Hi all,

So. Big discussion currently happening regarding putting student medical information on posters and putting them in office spaces (attached to classrooms) or management office spaces also.

 

Several of us are insistent that this doesn't happen as its protected category data and a breach would be a disaster. The rooms could easily be left unlocked (and would be unlocked, locking it constantly would be seen as inconvenient) and students can easily access them, and several other issues - but we have a new safeguarding officer who is refusing to take no as an answer and is trying to build an alliance of people who agree with her... Shes saying we could get parent consent too.

 

She is very vague about updating them, etc...

 

 

I'm insisiting it won't happen, but what do others think? Should we do it?

Edited April 5, 2022 by paulkerton

[psydii]

IMO

 

For life-saving information (allergies, etc) then this might be appropriate, particularly if consent has been gained from the child/parent.

 

For more general stuff (suffers from migraines etc) it would be hard to justify.

 

However if informed consent has been given, then consent has been given.

 

For the important stuff here, staff are made to sign a register that they have read the notes. The information is not posted on walls.

[jmak]

It's possible that in some limited circumstances you could justify this. However I think there are better ways to do it than have posters on the wall. What happens when the child isn't in that classroom? You need a system for that, in which case you've got a system that works without having posters on the wall.

 

We had a cupboard in the medical room with boxes for each child with a medical condition which had a photo of the child on them and any relevant medication inside. There were also photos on the inside of the cupboard doors. For information in the classroom, whatever system you use for registration should have the facility to store and show that information including photos.

[PrimaryNetMan]

Speak to your DPO for advice, and then point the "alliance" their way when they say no.

[paulkerton]

Speak to your DPO for advice, and then point the "alliance" their way when they say no.

 

Have already done so. She still seems determined though, but thankfully anyone who can grant this access to data to make it possible has nixed it.

So hopefully it's done for.

[Oaktech]

We have serious allergy details up in various pertinent places but they are all difficult for students to access and they are covered over. Anything more than that remains available in the MIS. First Aiders get a circular email from School Admin to check the MIS if anything is new/updated.

 

We might be lucky in that in all 3 of my schools we don't have anyone with an illness that could make them critical in seconds other than those with allergies.

[mikkydoos]

We do for serious allergies or health conditions. IMO not displaying this info to staff is far worse than pandering to GDPR bureaucracy... if it were placed in a staff only area such as a staffroom that is.

[paulkerton]

and herein lies a problem - we don't have staff only areas like that.

Also our MIS can flag these things up in registers, so I think that is as detailed as they need to get myself. They get a flag to remind them every time they open a register.

Edited April 6, 2022 by paulkerton

[mikkydoos]

Then I would kick it upstairs and get your head/SLT to make the decision.

[paulkerton]

Then I would kick it upstairs and get your head/SLT to make the decision.

Well, thats the point. It's delegated work. The decision has been made by experts in their field who have said no, and shes trying to fight that. Which is why I'm asking here for people's opinion on it so I can get a wider view point.

The information is already on our MIS and we've made an offer to make it available on our staff portal using the live data from the MIS, so hopefully that placates it.

[mikkydoos]

Well, thats the point. It's delegated work. The decision has been made by experts in their field who have said no, and shes trying to fight that. Which is why I'm asking here for people's opinion on it so I can get a wider view point.

The information is already on our MIS and we've made an offer to make it available on our staff portal using the live data from the MIS, so hopefully that placates it.

 

Well I'd say as long as you've made the info readily accessible to every staff member responsible for safeguarding the kids (which is all of them) I'd say you've done your bit.

If it were me I'd stand back and watch her drop herself in it then take the told you so stance

 

 

Is this person one of those newbies who comes in warrior fashion ? They're dangerous!

[paulkerton]

Is this person one of those newbies who comes in warrior fashion ? They're dangerous!

Yup the - "I want to make my mark" types who ends up upsetting everyone.

The next thing we've been told is a weekly "students with allergies" quiz. That won't go!

[mikkydoos]

Yup the - "I want to make my mark" types who ends up upsetting everyone.

The next thing we've been told is a weekly "students with allergies" quiz. That won't go!

 

 

I'd let her make a prat of herself. Some people don't want to be helped.

 

The problem to me would be that she's been given a safeguarding role (OH SO IMPORTANT), she's going to fly with anything that gets her noticed. Nothing gets you noticed like a new picture on the wall!... and they all love displays on the wall.

She'll see you as getting in her way regardless. She probably doesn't have any understanding of data protection or the legislation.

I'd get your DPO to slap your policies in front of her like previously mentioned.

Edited April 6, 2022 by mikkydoos

[AndyCrow]

Much of GDPR is about risk and accountability.

If you and the DPO highlight and document the potential risks involved in this new process then the ultimate decision should be with the Governors.

If she can prove that the risks are minimal having produced a DPIA,(it is a new process) then the Governors may give them the go ahead.

When the risks are accessed I would be surprised that it would get the green light.

[enjay]

At my previous schools (one of which was pre-GDPR, but I think the idea is still valid even now), there was a pack in each First Aider's office (rooms which were only accessible to students under supervision), which had a front cover on it meaning no information was immediately visible. There was also an Intranet page which listed the students, medical details and photos, so you could access the information from anywhere you might need it, e.g. in your classroom, on the sports field, on a trip.

 

I think that meets both medical and privacy needs.