Lippy

Thanks, we'll give this a go!

We have a few users who can open Office documents in OneDrive, but when the try to use their local Office App they can't open the document. Any ideas?

Looks like they are - https://www.bettshow.com/bett-suppliers-list/sensocloud?&azletter=S&searchgroup=libraryentry-bett#/

Although I've seen mention that it's good to start with the 'Who', I was working in the theory that if carrying out an audit 'from scratch' it would be easiest to start with thinking 'where do we hold/store personal data?' For this I wanted to show where the data flowed from (and in this case automatically synced with SIMS). Although not the original data source, if we put 'individual' here that wouldn't reflect the route. I agree this could be an issue. Just taking SIMS (or whatever MIS is used), the data held could be used for a number of purposes (educational, promotional etc) ... but I'm not sure how best to show this, without duplicating loads of data and making it extremely complicated.

I'm happy to add my voice! I work for two separate High Schools, one LA converting to an Academy with a small MAT and one a standalone academy creating a small MAT - neither school has done anything about GDPR, so I raised it as an urgent concern at both. One school has subsequently assigned an Assistant Headteacher who has set up a working party to include myself, the NM and a Governor, which is probably a good start ... although as a group we now are busy looking for guidance! The LA has done nothing about it, the small MAT has done nothing about it, everyone seems to be waiting, presumably for some clear, actionable, education-specific guidance. The Educational Press has mentioned it a few times, the Unions have mentioned it a few times and lots of IT suppliers have mentioned it ... but so far I've not seen any clear, actionable, education-specific guidance (I'm excluding gdpr.school from this generalisation, obviously). The immediate reaction seems to be it's an IT issue, which it clearly isn't, but as this forum proves, the NMs seem to be one of the few groups really looking into it (if nothing else, maybe just trying to prove it's not their role!). Plus the main source of guidance has been from IT companies! In an ideal world, if you comply with DP then there probably isn't a huge worry, but in reality I've not seen enough clear education-specific guidance which reassures me of this. So what do I want from the DfE/ICO? 1. Data Audit - some education-specific guidance and example template for a data audit and what related documentation should look like. 2. Public Interest - examples of what is and what isn't public interest, and what educational data would be outside of this (with relevant guidance) 3. Clear guidance to MATs/Heads about how GDPR compliance should/could be structured, including responsibilities, DPO role etc

I've been searching for a Data Audit Template, to see what is 'best practice' for auditing what data we hold in school, how we got it, keep it, update it, dispose of it etc, in readiness for GDPR. I see lots of mention of Data Audits but no examples of what they should look like in practice. I appreciate they will vary across different industries, and some companies are probably busy developing online systems to record this information, but I'm sure many schools are currently wondering how they can best perform this task. So, attached is my initial version, based on the various bits of information I have found. I would welcome your views on its effectiveness as a GDPR Data Audit tool, it's accuracy in terms of the guidance/definitions used, and it's balance in terms practical usability-versus-requirements. Information Audit draft v1.xlsx Thank you

Thanks guys I think in schools with an SBM on SLT this could work (depending on their role) In the schools I work with they both have a Finance Manager, which isn't really the same, and so I think it needs to be led by a member of SLT, or the Head.

I work with a couple of high schools (neither currently in MATS), and when I approached the Finance Managers to ask if they'd starting looking at GDPR yet, both replied that it wasn't their remit and they presumed the Network Manager would deal with it. I've only started looking at GDPR, but from what I can see this should be lead by someone in SLT rather than being a purely 'IT thing' ... so I wondered how other schools are dealing with it? As often seems the case with anything IT related in high schools - it's left with the NM to sort, even though to be fully embedded there will need to be changes to processes, practices, CPD etc, right across the school!

We use Groupcall's TruencyCall (which texts if kids are absent) and CallParents (used to send texts about detentions, snow days, reminders etc). We also use their 'text message in' which allows parents to text us. They are all online-based and link to Sims and work pretty well. Lots of schools use ParentMail which I believe can do similar, but I've not tried

I can personally recommend United Hosting (unitedhosting.Co.UK). I've had a reseller account with them for many years and a VPS for a few months. They have a secure data centre in London and are flexible with their VPS specs. They provide CPanel as standard as well as regular backups and genuine 24/7 support (they also have a data centre in the US but you can specify UK server)

Zoho also has a ticket system worth looking at

This can be done in Gmail I believe, but the easiest way is to use Outlook to access the Gmail accounts through Imap, then switching between accounts is easy

I have just been looking at blogging for our kids and ran into all sorts of problems with our LA blocking Wordpress. I think you'll find edugblog might be your answer here (pro version is about £40/yr but I think allows multiple managed blogs)

We had the same issue a year ago and had to set up complete new gapps accounts. There wasn't any way to make a smooth or neat transition. We issued instructions on how to set forwarders (you can't do that centrally for all accounts), and all users lost easy access to all past emails, contact lists etc. We have a similar problem when someone gets married; we end up having to just give them a new account. Gapps is good in theory but we find it does have issues when used in an educational setting. Google Drive and gmail data being stored outside the UK is also not ideal. We also have a bigger issue now, as we have accounts created via our VLE and although SSO works, recent changes at Google (apparently) mean we can't access email directly (eg on a phone or through Outlook). Needless to say we are not looking at moving to O365!

Can I ask what other high schools are doing in relation to access to Facebook via the school network? Do you ban it for everyone? Ban it for students but not staff? Allow everyone access but cover it on your AUP? What about using it to actually teach with (eg using its sociability features)? What about break/lunch times? What about teaching responsible use? What about other social sites and sites with social features? Who monitors student use? What sanctions are in place if inappropriate use is observed?