Hedgehog13

Who was this email sent to? Was it to all schools or just SCOMIS schools?

So who did this email from SIMS go out to? Was it to all schools that use SCOMIS or all schools in Devon etc?

Surely there must be a better way to resolve this dispute? Education Software Solutions (ESS) has asked the High Court to intervene in a row that risks disruption at 1,100 state schools in Northern Ireland. Capita sold the SIMS software to ESS, set up by the private equity firm Montagu, for £400m in 2020 as part of chief executive Jon Lewis’s efforts to reduce a £1.1bn debt burden. The outsourcer continued to provide the software to schools in Northern Ireland under licence, but ESS claims that permission expired in March. Capita disputes this, telling the court it accepted “commercial terms” for an extension of the licence proposed by ESS during a phone call. ESS wants the High Court to declare that no valid extension was made and have threatened to apply for an injunction forcing the software to be deleted across Northern Ireland. Around 1,100 Northern Irish state schools could be forced to delete copies of the software provided by Capita, which ESS claims are effectively pirated. Further information on this dispute and the court claims/counterclaims can be found on the WhichMIS? website at whichmis.com

Surely there must be a better way to resolve this dispute? Education Software Solutions (ESS) has asked the High Court to intervene in a row that risks disruption at 1,100 state schools in Northern Ireland. Capita sold the SIMS software to ESS, set up by the private equity firm Montagu, for £400m in 2020 as part of chief executive Jon Lewis’s efforts to reduce a £1.1bn debt burden. The outsourcer continued to provide the software to schools in Northern Ireland under licence, but ESS claims that permission expired in March. Capita disputes this, telling the court it accepted “commercial terms” for an extension of the licence proposed by ESS during a phone call. ESS wants the High Court to declare that no valid extension was made and have threatened to apply for an injunction forcing the software to be deleted across Northern Ireland. Around 1,100 Northern Irish state schools could be forced to delete copies of the software provided by Capita, which ESS claims are effectively pirated. Further information on this dispute and the court claims/counterclaims can be found on the WhichMIS? website at whichmis.com

When I was at Groupcall we partnered with Parents Booking, which also has an Events Booking module too, and it was extremely well-liked by the hundreds of schools that purchased it through us. Great piece of software, very easy to use for both the school staff and also the parents too. They introduced video last year and that has been taken up massively too - and they also allow multiple parents/carers to join the video calls from different locations etc. which makes life easier for working parents or split families... Whilst it links with your MIS, you can also simply upload a CSV instead if you prefer. I heartily recommend it and they give full access and training so that you can try it for free with your next event without any commitment to purchase too! https://schools.tecl.co.uk/education...3d%3d-&CC=&p=0

When I was at Groupcall we partnered with Parents Booking and it was extremely well-liked by the hundreds of schools that purchased it through us. Great piece of software, very easy to use for both the school staff and also the parents too. They intriduced video last year and that has been taken up massively too - and they also allow multiple parents/carers to join the video calls from different locations etc. which makes life easier for working parents or split families... I heartily recommend it and they give full access and training so that you can try it for free with your next parent evening without any commitment to purchase too! https://schools.tecl.co.uk/educationcompany7lz/lz.aspx?p1=VArDA1MDUzMzM5NFM3MTgxNDQyMjo2QjY5RURGNENBM0MzRjMwRjYzN0QxQTczMDUxQ0RCOQ%3d%3d-&CC=&p=0

Just yesterday I received an email promoting exactly this - RecordLink - and offering a free trial too. This is the link if it is of any use to anyone. https://r1.dotdigital-pages.com/p/25N2-T6J/recordlink?utm_source=https%3a%2f%2fschools.tecl.co.uk%2feducationcompany7lz%2f&utm_medium=email&utm_campaign=RecordLink+-+Email+1+-+November+2021&utm_term=Document+management+in+SIMS+made+easy&utm_content=6482596&gator_td=2wdKQWbGawjfsWz3fgDHOrORmZ%2fTAgWM0GLW1C91CqaTlLCB%2bHnsiyWK0c172DQeRxInPj55GtyswXQPOhjuRIEhKhiAJBks%2bqOZs14kgn0VKas2ih4pbC43Zqqcye1sIYC2NcVT7UzmzSYIuCBs4m%2bfIb8eoyaqhmQ7m63gAUV%2buvI8i3R%2bSDi3zABx22WF

Link:

Hampshire Council were fined £100k for something very similar when personal information was found in waste being dumped...that was under the DPA, so 20% of the maximum fine was imposed. Wouldn't want a school to have to pay that, or worse - 20% of the 20m Euro max under GDPR...

Given that the ICO use Wordpress for their own blog....

The school should have a privacy notice that explains what data they store, process etc. and where it is used. If the teacher has set this blog up themselves, I doubt it has been included in the current notice...

might be worth noting this section of the Wordpress 'terms of service' as a starting point... 'Our Services are not directed to children younger than 13, and access and use of our Services is only offered to users 13 years of age or older. If you are under 13 years old, please do not register to use our Services. Any person who registers as a user or provides their personal information to our Services represents that they are 13 years of age or older'

This is correct under the DPA and under the GDPR in terms of definition of controller and processor, but under the new GDPR the data processor will have direct and enforceable obligations to comply with the GDPR themselves. Under the DPA the Data Controller (school for example) are responsible for ensuring that processors keep data secure but under the GDPR the data processors themselves have to maintain appropriate technical and organisational measures to ensure appropriate levels of security for the personal data they are processing. They will need to provide evidence in some form to the data controller to allow the data controller to assess this and agree/disagree before they allow the processor to process the personal data and there will need to be a legally enforceable contract that sets out in detail what personal data is to be processed, how, where, for how long, by whom etc. Under DPA, data processors are fairly well protected from penalties/repercussions from data breaches or other compliance issues as the responsibilities lie with the data controller. Under GDPR, they each have responsibility and are both liable for any non-compliance issues. Processors have an obligation to assist the ICO on request. The ICO will have its enforcement powers extended to processors as well as controllers, enabling them to fine etc. processors in the same way as controllers as well as being able to halt processors from continuing to process data, enter their premises to investigate non-compliance etc. This is a major (and much needed) shift that will make sure that data processors have to take just as much care of personal data as controllers or face the consequences.

Unfortunately, when it comes down to it, the decision on the legal basis (if challenged) will be made by the ICO and not by educators...

I have to agree with maturelady here - the 'public interest' legal basis will definitely cover a great deal of the personal data processing within schools, but not all of it. Think about it more in terms of 'could the school/this task within the school, operate/be done WITHOUT processing the personal data or sharing it with another party? Parents buying uniform can easily do that by going into the suppliers premises and buying it there, without need for the school to share data with the supplier... Looking at homework software etc. - many schools manage without using this kind of software, so it is difficult to argue that this is necessary under the public interest basis. Equally, as schools are classed as 'public authorities' they cannot also use the final legal basis of 'in the legitimate interest of the controller etc' as this is not allowed to public authorities to processing carried out by public authorities in the performance of their tasks.