Best Practice Update

Meeting DfE Digital standards in schools and colleges in orange and white text. Children in the background smiling or working. Children in a small circle graphic on laptops.  Data Protection Education logo in blue on an orange background

The DfE have recently published an update to their meeting digital and technology standards in schools and colleges, with three new sections:
Digital Accessibility Standards
Digital Leadership and Governance Standards
Laptop, desktop and tablet standards

Data breach in orange text on a computer screen with computer data behind it

Security researchers and computing blogs are reporting 'the mother of all breaches' in reference to a data breach where billions of records have been breached.  The dataset doesn't come from one single breach but a compilation of multiple data breaches.  

International Data Transfers (part 1):  Navigating Cross-Border Data Transfers: Understanding EU SCCs, UK Addendum, and UK IDTA

The first in a seriers on International Data Transfers..
Navigating Cross-Border Data Transfers: Understanding EU SCCs, UK Addendum, and UK IDTA

In the ever-evolving landscape of global data protection, we are continually challenged to ensure the secure and lawful transfer of personal data across borders. The European Union (EU) has long been a frontrunner in establishing data protection standards, and its regulations have far-reaching implication

Data breach in orange text in computing font on a computer screen with computer code in blue text

A number of schools have reported a data breach by ClassCharts this week.  ClassCharts is school management software that allows teachers to create a customisable classroom seating chart.  It can also be used to track student behaviour, reading levels and other student data.

Robot wearing an orange hoodie holding a piece of paper with the words Data Protection education is transparent text

This week the IAPP published a set of AI privacy risks in the wake of concerns over how AI should be regulated.  There are moves to regulate AI, such as the EU AI Act, however  because AI remains quite an unknown quantity, there is a lot of unease and uncertainty around it's use, ethics, privacy and intellectual property.

hand holding a mobile phone with social media icons on it. Litus Digital logo and Data Protection Education logo. Guardians of Privacy: Navigating social media in educational settings in blue text.  A series of articles about social media, privacy and schools in black text.  Coloured pencils at the bottom

This article is one of a series written by Data Protection Education in collaboration with Litus Digital, a social media management company.  The articles came about from questions asked by Data Protection Education's customers, our own experience of working in education,  as school governors, parents and data protection professionals.  The articles raise questions about how social media can be used as safely as possible in a school environment,  security consideratio

hand holding a mobile phone with social media icons on it. Litus Digital logo and Data Protection Education logo. Guardians of Privacy: Navigating social media in educational settings in blue text.  A series of articles about social media, privacy and schools in black text.  Coloured pencils at the bottom

This article is one of a series written by Data Protection Education in collaboration with Litus Digital, a social media management company.  The articles came about from questions asked by Data Protection Education's customers, our own experience of working in education,  as school governors, parents and data protection professionals.  The articles raise questions about how social media can be used as safely as possible in a school environment,  security consideratio

  1. Guardians of Privacy: 14. Social Media and Cyber Bullying
  2. Guardians of Privacy: 13. Social Media, Copyright and Intellectual Property
  3. Guardians of Privacy: 12. Social Media and Going Viral
  4. Guardians of Privacy: 11. Staff Social Media Accounts
  5. Guardians of Privacy: 10. Social Media and Cookies
  6. Guardians of Privacy: 9. Social Media and Morality
  7. New Resources for Schools from the ICO
  8. Guardians of Privacy: 8. Social Media Policies
  9. Guardians of Privacy: 7. Social Media Data Retention
  10. Guardians of Privacy: 6. Posting Safely
  11. Guardians of Privacy: 5. Social Media and Consent
  12. Guardians of Privacy: 4. Social Media Access Control
  13. Guardians of Privacy: 3. Social Media Channels
  14. Guardians of Privacy: 2. Law and Regulations
  15. Guardians of Privacy: 1. Social media, privacy and children
  16. The ICO reprimands a Multi Academy Trust
  17. KCSIE: Filtering, Monitoring and Privacy
  18. Guidance for the use of school email and applying email retention in schools
  19. Data Protection Tips for Early Years Settings
  20. Children's Privacy around the world is a puzzle
  21. Trust Initial Plan Checklist Update
  22. Records Management Best Practice Update
  23. Governors and Data Best Practice Area Update
  24. What do I need to redact?
  25. Trust Initial Plan for Data Protection Compliance (for Multi Academy Trusts)
  26. Google for Education Resources: Helping IT Admins meet DfE digital and technology standards
  27. Lettings Best Practice and Guidance
  28. Considerations when migrating to a new MIS
  29. Public bodies and sensitive data
  30. Get a DPE Badge for your website!
  31. ICO: 10 Step guide to sharing information to safeguard children
  32. Help after a Cyber Attack/Incident
  33. Data Protection and Cyber Security (Inset Day) Training Ideas
  34. How KCSIE is linked to Cyber Strategy
  35. Handling Freedom of Information Requests the right way
  36. Where's Harry the Hacker?
  37. The ICO Reprimands a school
  38. Subject Access Requests (SARs)
  39. Redaction Guidelines Updated
  40. Using WhatsApp in Schools
  41. How to contact us for support, subject access requests, data breaches and FOI's
  42. FOI: Reinforced Autoclaved Aerated Concrete
  43. FOI: Henry Jackson Society
  44. FOI: Vaccination Justifications
  45. How the Record of Processing Can Help You
  46. What does a Data Protection Officer Do?
  47. Blog: Best Practice on the Retention of Child Protection Information
  48. Carrying out Supplier Due Diligence
  49. Email and retention periods
  50. How Long Should You Keep Personal Data For?
  51. Sharing this year’s Nativity play online
  52. A quick introduction to the Phishing Simulation tool
  53. B&H FoI: Racist/religious incidents/bullying
  54. Protocol for Setting Up and Delivery of Online Teaching and Learning
  55. Class Dojo International Data Sharing
  56. Model Publication Scheme: Amendments, Improvements and Updates
  57. Transparency
  58. Parents and students covertly recording conversations
  59. SAR? ER? FOI?
  60. Research projects and GDPR
  61. Secure file transfer of files using Royal Mail
  62. Emergency contacts and consent
  63. Key elements of a successful DPIA
  64. FOI Publication Schemes
  65. Best Practice for Managing Photos and Video
  66. New Drip Feeds: Recognise and Respond to Subject Access Request
  67. When to contact the Data Protection Officer?
  68. National child measurement programme
  69. Make sure DPE is your registered DPO with the ICO
  70. Headteacher fined for breach of data protection legislation

Search