Hi,
I know the legal basis is statutory guidance for KCSIE and PREVENT however we have a parent pressing against this.
So - the collection of sites / search terms etc - the legality of collecting this data.
MITM attacks (ie our request for students to install a certificate onto their personal devices).
Goes beyond any 'reasonable' implementation of the requirements.
Exposure to future legal and financial risks:
* what if the company sells on the data?
* what if the company is breached (and this data become available)?
* what if we 'punish' a student for what they are looking at (by collecting this 'illegal' data)
Now I'm sure we can keep replying to this with KCSIE and PREVENT (and also how safeguarding trumps GDPR etc).
My request is has anybody had to deal with a parent like this before and have any advice.
(This is an international parent who has professional understanding of IT security)
Cheers,
Martyn
