Best Practice Update

Meeting DfE Digital standards in schools and colleges in orange and white text. Children in the background smiling or working. Children in a small circle graphic on laptops.  Data Protection Education logo in blue on an orange background

The DfE have recently published an update to their meeting digital and technology standards in schools and colleges, with three new sections:
Digital Accessibility Standards
Digital Leadership and Governance Standards
Laptop, desktop and tablet standards

Data breach in orange text on a computer screen with computer data behind it

Security researchers and computing blogs are reporting 'the mother of all breaches' in reference to a data breach where billions of records have been breached.  The dataset doesn't come from one single breach but a compilation of multiple data breaches.  

International Data Transfers (part 1):  Navigating Cross-Border Data Transfers: Understanding EU SCCs, UK Addendum, and UK IDTA

The first in a seriers on International Data Transfers..
Navigating Cross-Border Data Transfers: Understanding EU SCCs, UK Addendum, and UK IDTA

In the ever-evolving landscape of global data protection, we are continually challenged to ensure the secure and lawful transfer of personal data across borders. The European Union (EU) has long been a frontrunner in establishing data protection standards, and its regulations have far-reaching implication

Data breach in orange text in computing font on a computer screen with computer code in blue text

A number of schools have reported a data breach by ClassCharts this week.  ClassCharts is school management software that allows teachers to create a customisable classroom seating chart.  It can also be used to track student behaviour, reading levels and other student data.

Robot wearing an orange hoodie holding a piece of paper with the words Data Protection education is transparent text

This week the IAPP published a set of AI privacy risks in the wake of concerns over how AI should be regulated.  There are moves to regulate AI, such as the EU AI Act, however  because AI remains quite an unknown quantity, there is a lot of unease and uncertainty around it's use, ethics, privacy and intellectual property.

hand holding a mobile phone with social media icons on it. Litus Digital logo and Data Protection Education logo. Guardians of Privacy: Navigating social media in educational settings in blue text.  A series of articles about social media, privacy and schools in black text.  Coloured pencils at the bottom

This article is one of a series written by Data Protection Education in collaboration with Litus Digital, a social media management company.  The articles came about from questions asked by Data Protection Education's customers, our own experience of working in education,  as school governors, parents and data protection professionals.  The articles raise questions about how social media can be used as safely as possible in a school environment,  security consideratio

  1. Guardians of Privacy: 15. Navigating Social Media in Educational Settings Summary
  2. Guardians of Privacy: 14. Social Media and Cyber Bullying
  3. Guardians of Privacy: 13. Social Media, Copyright and Intellectual Property
  4. Guardians of Privacy: 12. Social Media and Going Viral
  5. Guardians of Privacy: 11. Staff Social Media Accounts
  6. Guardians of Privacy: 10. Social Media and Cookies
  7. Guardians of Privacy: 9. Social Media and Morality
  8. New Resources for Schools from the ICO
  9. Guardians of Privacy: 8. Social Media Policies
  10. Guardians of Privacy: 7. Social Media Data Retention
  11. Guardians of Privacy: 6. Posting Safely
  12. Guardians of Privacy: 5. Social Media and Consent
  13. Guardians of Privacy: 4. Social Media Access Control
  14. Guardians of Privacy: 3. Social Media Channels
  15. Guardians of Privacy: 2. Law and Regulations
  16. Guardians of Privacy: 1. Social media, privacy and children
  17. The ICO reprimands a Multi Academy Trust
  18. KCSIE: Filtering, Monitoring and Privacy
  19. Guidance for the use of school email and applying email retention in schools
  20. Data Protection Tips for Early Years Settings
  21. Children's Privacy around the world is a puzzle
  22. Trust Initial Plan Checklist Update
  23. Records Management Best Practice Update
  24. Governors and Data Best Practice Area Update
  25. What do I need to redact?
  26. Trust Initial Plan for Data Protection Compliance (for Multi Academy Trusts)
  27. Google for Education Resources: Helping IT Admins meet DfE digital and technology standards
  28. Lettings Best Practice and Guidance
  29. Considerations when migrating to a new MIS
  30. Public bodies and sensitive data
  31. Get a DPE Badge for your website!
  32. ICO: 10 Step guide to sharing information to safeguard children
  33. Help after a Cyber Attack/Incident
  34. Data Protection and Cyber Security (Inset Day) Training Ideas
  35. How KCSIE is linked to Cyber Strategy
  36. Handling Freedom of Information Requests the right way
  37. Where's Harry the Hacker?
  38. The ICO Reprimands a school
  39. Subject Access Requests (SARs)
  40. Redaction Guidelines Updated
  41. Using WhatsApp in Schools
  42. How to contact us for support, subject access requests, data breaches and FOI's
  43. FOI: Reinforced Autoclaved Aerated Concrete
  44. FOI: Henry Jackson Society
  45. FOI: Vaccination Justifications
  46. How the Record of Processing Can Help You
  47. What does a Data Protection Officer Do?
  48. Blog: Best Practice on the Retention of Child Protection Information
  49. Carrying out Supplier Due Diligence
  50. Email and retention periods
  51. How Long Should You Keep Personal Data For?
  52. Sharing this year’s Nativity play online
  53. A quick introduction to the Phishing Simulation tool
  54. B&H FoI: Racist/religious incidents/bullying
  55. Protocol for Setting Up and Delivery of Online Teaching and Learning
  56. Class Dojo International Data Sharing
  57. Model Publication Scheme: Amendments, Improvements and Updates
  58. Transparency
  59. Parents and students covertly recording conversations
  60. SAR? ER? FOI?
  61. Research projects and GDPR
  62. Secure file transfer of files using Royal Mail
  63. Emergency contacts and consent
  64. Key elements of a successful DPIA
  65. FOI Publication Schemes
  66. Best Practice for Managing Photos and Video
  67. New Drip Feeds: Recognise and Respond to Subject Access Request
  68. When to contact the Data Protection Officer?
  69. National child measurement programme
  70. Make sure DPE is your registered DPO with the ICO
  71. Headteacher fined for breach of data protection legislation

Search