Search the Community
Showing results for tags 'data protection'.
-
Can anyone recommend any Data Protection training specific to schools Data Protection Lead's? Don't know about you but we're experiencing more errors than ever and that most likely is down too the lack of training these people have received who have nominated as their DPL I really feel for them, in this ever changing area of Data Protection.
-
If you have any questions (as regards for schools /public sector/ GDPR in general as applies to you) please feel free to post them here. This week GDPR meetings offer us an opportunity to ask questions of the ICO regulators and a cross sector of child's rights' acdemics, technologists, industry and NGOs. We will be considering consent, profiling, and age verification, among the broader issues. I will gather the questions up, and respond in bulk next week as a post, after the discussions. I can also offer to repeat on a regular basis after that, based on need.
- 14 replies
-
- data protection
- faq
-
(and 3 more)
Tagged with:
-
Hello, This my thread first post on here, but i have been reading the forum for some time. We are currently looking at moving our schools email to our own Office 365 Tenant. We currently use a mix of LA provided Gsuite and Office 365. We are currently told the LA provided Office 365 is secure when sending to/from the LA. If we moved to our own tenant would it still be secure with office 365 tenants? I also understand we could send encrypted emails through Office 365 to any address, would these meet the requirements of the DPA to send personal information? I assume email would be secure (TLS Security?) within our own domain in our own tenant? Sorry if this has been asked before, I have read a number of threads but haven't seen much in terms of DPA & Office 365. Any advice or expiration would be much appreciated Many Thanks
- 3 replies
-
- data protection
- dpa
-
(and 2 more)
Tagged with:
-
I think everyone would agree we would like the DfE to provide us guidance and clarity on GDPR. I have found someone who is genuinely listening to our concerns about GDPR. I would like to co-ordinate a 'voice' into DfE about the areas where that guidance is most needed. Here’s my top 3 issues…what are yours? The more replies we get the more compelling our cry for help. The DPO - who is the best person to take this role in school and how will this person be funded? Legal basis for processing - when can't a public funded school use 'Public interest' as a legal basis for processing? SARs - what data should and shouldn't be included in a SAR? Keep them coming please. I'd like to get back to the DfE as soon as I can.
- 35 replies
-
- 20
-
-
- data protection
- dfe
-
(and 3 more)
Tagged with:
-
Data Protection and old SIMS users
Laurence posted a topic in Data Protection & Information Handling
Hi Does anyone know the rules for keeping user details on SIMS re Data Protection? A revision of staff ID rules at school has precipitated a discussion about how to delete users from SIMS. Most think is not possible to delete old users, but I think this is a data protection issue as we have details far beyond the recommended 6 years to clear any reporting requirements. But if there is no method of removing old users, then are most schools vulnerable to Data Protection contravention? Any thoughts? -
Join Net-Ctrl and SafeNet for a Free Data Protection and Encryption for the Cloud Webinar Net-Ctrl and SafeNet will be providing a free webinar on the 27th July 2011 at 11.00am, the webinar will only last one hour and will focus on SafeNet Data Protection and Encryption for the Cloud. SafeNet ran this webinar a few weeks ago to some of their customers, which attracted huge audiences; this really is a hot topic at the moment, and well worth a listen. The webinar is to be taken by a SafeNet Engineer and he will go through: • The challenge of Data Protection today • SafeNet’s Universal Data Protection • SafeNet’s Data Encryption & Control Solutions • SafeNet’s Data protection in the Cloud You will also have the opportunity to ask questions throughout on this hot topic area. If you’re interested in attending this free webinar click HERE to register, or call Net-Ctrl on 01473 281 211.
-
- data protection
- encryption
-
(and 1 more)
Tagged with:
-
There seems to be a bit of publicity about issues surrounding the encryption of laptop data present. Is this something that we should be applying to teacher's laptops if they are taken out of school? If so, is there a way of encrypting data using native Windows tools or does it require third party software? I don't know much about it but presumably the principle is to store the data in such a way that if the laptop is stolen, the contents of the hard drive cannot be retrieved and read?
- 7 replies
-
- bitlocker
- data protection
-
(and 4 more)
Tagged with:
-
We're looking into the possibility of outsourcing the role of DPO. Is there a provider of this type of service that anyone would recommend?
- 11 replies
-
- data protection
- dpo
-
(and 1 more)
Tagged with:
-
Hi All The DfE guidance around Exclusions (Sept 2017) contains statutory guidance advising the governing board in preparing for the consideration of an exclusion hearing that attendees are provided with the same evidence pack 5 days ahead of the hearing date ie, inclusion officer, social worker, parents and governors (and possibly others). DPOs of some schools are beginning to advise their respective school to only make this information available to attendees 1 hour prior to the meeting in order to avoid a personal data breach. The guidance around exclusions is dated 2017 and is obviously pre-GDPR. Has anyone had any experience of this? I tend to feel that a either decision should be made on a case by case basis and that the decision should rest with the DPO or that the pack should ask all those in receipt to respect the confidentiality of the evidence and to return the document within an agreed period of time. Any thoughts? Many thanks Annette
- 6 replies
-
- data protection
- exclusions
-
(and 1 more)
Tagged with:
-
We transfer lots of data with lots of other companies/organistions. I've yet to find a company that dosen't tell you that they fully comply with the data protection act and your data will be completely secure. but what checks (due diligence) do you carry out prior to transfering data that all is secure and above board? Often decisions have been made to transfer the data before it gets to me to do and when I ask questions about the organistations and their security I get vague answers and told to get on with it. Does anyone have a "checklist" I could issue to senior/middle management to use when signing up to transfer data?
- 3 replies
-
- data protection
- due diligence
-
(and 1 more)
Tagged with:
-
Hi All, I have been asked whether we can use our VLE (My Learning) for teachers to store and then remotely access Excel documents containing student information such as grades, SEND information, ethnicity etc. My initial reaction is no and that we should instead setup remote access for teachers onto our main network, however I wondered whether any other schools out there were using VLE's in this manner? My main concerns are with Data Protection and backup strategies, however any comments/thoughts would be appreciated. Thanks All Kevin Byrne
-
I've done a quick search, but can't find any examples of a primary school data protection policy on here. Does anyone have a good sample policy they would be willing to share? Our office manager has asked me to look at this. I've found the Becta guidance docs on National Archives, but nothing else (short of going to as many school websites as I can think of....).
-
An article in PC Pro magazine brought this to my attention. Details are in the link below, created by a GP. As I read it, all of our medical data is just about to be harvested up by an organisation (HSCIC) purely so this data can be sold to other organisations. This data will be transferred from GP practices and hospitals and will be updated monthly. They say that the data is anonymised, but not that much by the looks of it – much can be tracked back to individuals without too much bother. This data could quite easily be obtained by insurance companies, mortgage providers, etc with quite worrying consequences and that’s probably just the tip of the iceberg. Please do make your own minds up. For lots more info, visit: care.data - the brief version You can opt out, but it needs to be done quite quickly. The process is due to start in Autumn and once data has been sent to HSCIC, you cannot ask them to remove it, just can just opt out of the monthly update process. I know I’m going to opt-opt out ASAP and write to my MP too. Meldrew
-
Took a bit longer than I had hoped but here’s the first of a set of free resources. These are videos and Mind-map sheets. The staff training one which you can use as part of your whole school awareness training is nearly ready and I will post later in the week. I really would value feedback, both positive and negative. For DP leads Mind-map sheet Information to share with parents Mind-map sheet
- 6 replies
-
- 11
-
-
- data protection
- gdpr
-
(and 1 more)
Tagged with:
-
Hi Everyone! We’re so pleased to be sponsoring EduGeek and we look forward to discussing what we’re passionate about ….. Data Backup! We have 30 + years in the IT industry and for many of those we’ve been banging the drum about data and how it’s stored. Having a solid data storage strategy which includes an off-site storage solution is the ONLY way to guarantee recovery from Ransomware and Malware. We understand that secure Data Backup is essential for Schools and Academies as part of their greater data security strategy. The service has gone from strength to strength, and it’s been great to see the increase in awareness of Data Protection within the Education sector. We are committed to being the leading Cloud Backup provider for Education. Our service is bespoke for each client and we are able to offer industry specific advice and insights to ensure you have the best protection for your critical data. Our solution is easy to setup, we hold your data in our own UK based Data Centres and we offer educational discount. You can get pricing and register for a FREE trial/demo via our website or message any of the MyCloudBackup users in this forum Visit our website for more details: https://mycloudbackup.co.uk/education/ I look forward to virtually meeting you all! Helen
- 24 replies
-
- 1
-
-
- cloud backup
- data backup
-
(and 3 more)
Tagged with:
-
This is my latest article based on Scott McLeod’s 26 Internet Safety Talking Points. Over the next few weeks I am looking at each point to tease apart the ideals behind them, to try to see both sides of the discussion and to share examples about who others have work on the issues. A lot of this will be from a UK-centric position but hopefully it will provide some insight into the similarities and differences with our friends in other countries. Today’s point is about Decision Making To use technology you should have a reason, understand what you want it to do and also understand how you can measure whether it is achieving it or not. Oh dear … this sound like we are going to talk about planning again. In the past a number of choices about technology have been a little chicken and egg with what has been used. There have been pilot projects or innovative schools who have gone out and done something interesting with new or emerging technology. The technology has inspired them to try something new and when it has worked you then find research to look into it on a wider scale. This is where folk like Becta came in … as well as groups such as the Association of Learning Technology, NAACE, Besa and so on. They took the research to the next level, either as partnerships with schools, those doing the research, with suppliers or as the controller of funds (or any combination) … resulting in ring-fenced funds to allow schools and LAs to implement a given technology. So the idea that the technology should be based on your choice has not always been the way it should have been, but it was usually instigated based on good practice and research. How will it was implemented is then debatable and how much that removed control and decision making from individual schools is another point some will raise. But where does the technology coordinator (NM, ICT Coordinator, LA Technology Manager) sit in this? To some extent they might have chosen the specific technology based on available funds, with a certain set of features, but the pedagogy behind it all should be pretty agnostic and be able to use whatever is provided. An IWB is an IWB … and whilst specific software might have benefits over other solutions the idea of it being used by learners is common … it is just the method which might change. The arguing point against this is around wireless tablets connected to projectors (removing the requirement for the learner to come to the front of the class … an important feature in some schools with learners who do not engage when in front of their peers) or the ‘add-on’ tools such as voting systems (actually a separate technology in their own right but can work well with IWBs). The other arguing point around this is about policies and strategies. I hate to say it but there is a little thing called the law. In fact it is the Law. It deserves the capitalisation. And this varies across the world. There are many things which educationally would seem to be perfect decisions but are then put on hold or stopped because the NM / Tech coord / etc says no. This is not done lightly, nor is it done without consideration for what benefits will be lost and it is usually done with some attempt at compromise. Areas where there will be clashes ranging from safeguarding, copyright and intellectual property, data protection and information management, funding and classroom management. A good NM will educate you about these (if you are not up to speed) and will work with you to get the most out of tech … but they are frequently the gatekeeper as to what tech you can use because they have the knowledge about the bits which will cause problems. In the same way you have people to tell you not to try blowing up the science lab (in spite of how much fun it was when we were at school to see people do experiments that blackened the ceiling), or have people who tell you not to use certain classrooms due to them falling down … you have people who will say not to use certain technologies in certain ways. I’ll discuss the legal side of this in a later post … but just try to believe that a good NM is talking these into account and advising Senior Leaders, classroom teachers, office staff, parents, learners, local community and the random people who ring up the school because of things you post on the internet. Yes, the Technology Coordinator works for you, but part of that job is choosing or helping to choose appropriate technology and keeping you safe. Don’t give them a job and then tell them they can’t do it! On the other side, your NM should not keep things as a dark art and be the only person making choices. Any choices made should be clearly explained and, as per the last blog post, show where they are held accountable. Likewise the choice of technology should not force you down a particular educational route, but it can be an inspiration for doing something different. Be aware of the differences and look at the early adopters to see what they did and what worked / failed. (originally posted at http://www.grumbledook.org/2012/08/28/internet-safety-talking-point-2/)
-
- edugeek
- data protection
- (and 12 more)
-
Naturally they chuck terrorism on the end of their statement....
- 2 replies
-
- cctv
- data protection
-
(and 3 more)
Tagged with:
-
I've just been asked to link to an online survey (SurveyMonkey) asking pupils in our LEA (Years 7-10) about their sporting habits. I've seen the survey and the first few questions are - First Name Surname School Year Form Gender Now I've got a problem with these questions as I feel they are unethical and too intrusive. I've informed the PE teacher at our school that I'm not willing to add this link to our website or VLE, citibg the data protection act. He's phoned the teacher who set up this survey to report this and within the next half hour or so he'll be here to try and browbeat me into accepting this. He doesn't want to redo the questions as a couple of schools have already taken the survey. I'm equally adamant that I won't let our pupils undertake this survey without the restrictions I asked for. I sincerely believe that I'm protecting our pupils by doing this. What I need quite sharply is something relevant from the data protection act which I can bring up on screen to back up my arguement. I'll be going through it myself in a moment. Thanks in advance.
-
Hi All, I've been doing some thinking lately about data protection and the use of auto-backup solutions such as iCloud, google backup, onedrive etc. Our staff members all have iPads. If their iCloud backup and photo backup is turned on, and they have any photos of our students on their iPad, those photos will be getting backed up to Apple's servers. The same goes for android/windows devices if their respective photo backup solutions are turned on ('on' seems to be the default setting). We also use a piece of safeguarding software which is accessed through any browser. Included in this software is the ability to upload files, such as case referrals etc. Obviously this is highly sensitive data. To view these uploads whilst logged in through a browser, you have to download them. I'm concerned that if users log in and do this on a mobiole device, their download folder may be getting backed up to an Apple/Google/Microsoft server without them even knowing it. I'm assuming in both of these situations, the GDPR guidelines for data protection would be broken. Does anyone have any further clarification on this? At the moment, I'm telling staff to turn off iCloud/photo backup. I'm also instructing them to only view the Safeguarding uploads on a school PC. Any advice would be greatly appreciated. Many thanks!
- 4 replies
-
- data protection
- gdpr
-
(and 2 more)
Tagged with:
-
Hi Everyone, I would like to introduce a policy in school that forces every staff member to contact IT before buying new software (or even hardware) or before signing up for any online subscriptions. Above that the must contact the Data Manager, if students, staff or parent data is involved. Does anyone already have a procedure or policy for this? Would you mind sharing? Thanks!
- 4 replies
-
- data protection
- policy
-
(and 1 more)
Tagged with:
-
Our school has been using educare for our Data Protection, Fire Safety in Education, Health & Safety in Education, The Prevent Duty, etc. The staffing manager is not happy with this system and wants me to find an alternative. He thinks the courses are too long (DP is 1.5 hours in total) and the content/examples aren't school relevant in many cases. I don't think he is that impressed in online courses in general, although I emphasised that I have no staff (or hope of getting any) with training skills who could start developing and delivering training. Are any schools out there really impressed with either e-learning they are using, or a company they invite in to deliver training to staff? I am interested to hear how other schools deliver such training. Any suggestions would be appreciated as always. Thanks very much Angela
- 6 replies
-
- data protection
- dp training
-
(and 3 more)
Tagged with:
-
Good morning I wonder if anyone out there might be willing to share their policy documents with the class and also any good ideas with regards to how to write and enforce a sound data protection and acceptable use strategy. Please be aware, that the best bits may well be 'borrowed'... Discuss
- 1 reply
-
- acceptable use
- data protection
-
(and 1 more)
Tagged with:
-
This one just crept up on me. New Act coming into force June 2025! Big changes to GDPR to water down many things but also adds new responsibilities. https://ico.org.uk/about-the-ico/what-we-do/legislation-we-cover/data-use-and-access-act-2025/the-data-use-and-access-act-2025-what-does-it-mean-for-organisations/
-
So, we are on the 25th May 2017. One year from today GDPR comes into play and there is still a lot to do ... heck, there is still a lot to do for the DPA in many schools, but this will kick things up a gear. Mods / Admins, would it be possible to have a dedicated forum within the School Administration section (similar to e-Safety) so that relevant conversations can be put in there? It will also allow for a sticky threads for resources, etc. Please?
- 3 replies
-
- 5
-
-
- data protection
- dpa
-
(and 2 more)
Tagged with:
