Data Protection Act And Root/Administrators Passwords.

[tickmike]

Hello all ( uk and the world).

 

Carrying on about the access to the school network by Teachers/ helpful parents and anybody else .

See http://www.edugeek.net/index.php?name=Forums&file=viewtopic&t=4068

 

I going to write to SMT at this school which is made up of the head, parents,and others from our village.

 

I need to know if there is something in the Data protection act saying that the school must have access to the admin and root passwords, because the parent /chairperson left a phone message saying they must have them as in the data protection act..

 

Regards Michael.

[bossman]

I would think that the only reason that the school should have access to the admin passwords is for future reference incase you left for what ever reasons. It could also be that this chairperson is paranoid about you having sole control of the network and feels that they should by authoritive right have everything that is going which makes them feel important. How do you feel about this and what does the headteacher say on the matter. My headteacher and my line manager have nothing to do with passwords but i have them all documented and kept in a safe place where if they needed them they could have access but only with my consent. Sometimes if you have an SLA agreement with the local authority they would have to have access incase of emergencies but that is all. I don't think there is anything in the data protection act that specifically states you have to give the passwords to the school. I would ask them to give you a copy in writing and see what becomes of it.

[Geoff]

BECTA is pretty good at answering questions like this for you, and indeed they have.

 

http://schools.becta.org.uk/index.php?section=is&catcode=ss_to_es_pp_le_03&rid=9963&PHPSESSID=df1bdb21cd1198cd8503dcf88d6929cb

 

Also you might want to consider the implications of the Computer Misuse Act. Something BECTA deals with in the same section of its site.

 

http://schools.becta.org.uk/index.php?section=is&catcode=ss_to_es_pp_le_03&rid=9962&pagenum=1&NextStart=1

 

Both are a good read for everyone here.

 

You should also consider developing an AUP (Acceptable Use Policy) for both the staff and the children.

[russdev]

no in fact data protection works in opposite way the data access is limited to appropriate people.

 

What i suggest is that doe it this way that the admin password is out in sealed envelope and that if used then it must be replaced and changed etc.

 

Have this written into a policy etc etc

 

If they still insist write to them and say that you wont reasonable for any legal issues of security of network or data and that you can say that the network will be stable..

[tickmike]

Hello and thanks. Some more good advice to add to my strength.

I don't want to go to this SMT meeting so what I will do is to write all the related details down what they have to do and what I will do for them, about these password , AUP, Data protection etc..

After all the school is run by untrained parents with three professional teachers.

 

That's good reading on the Becta web site ( Maybe add a link/copy on this site to that useful info for all to read ).

 

Regards Michael.