90 likes | 219 Views
Keeping Mum with Students. "You must have a pass to get through here, alternatively go round the corner to get in the other way" (Brighton hospital). Adrian Slater – University solicitor and data controller ( a.j.slater@adm.leeds.ac.uk – Tel:3434079) Kevin Darley – IT Security Co- ordinator
E N D
Keeping Mum with Students "You must have a pass to get through here, alternatively go round the corner to get in the other way" (Brighton hospital) Adrian Slater – University solicitor and data controller (a.j.slater@adm.leeds.ac.uk– Tel:3434079) Kevin Darley – IT Security Co- ordinator (k.j.darley@leeds.ac.uk – Tel: 3431118) Keeping Mum 2012
Training becoming essential ICO and "new enforcement climate" – £500,000 fines! “Uni got talent”! Why are we doing this?
Surrey College – email attachment with medical details of students accidentally sent to all sixth formers not tutors as intended – forced undertaking = check content and recipients of emails Hertfordshire County Council - £110k fine for faxing sensitive data to wrong addresses = faxing too dangerous? A4e – £60k fine for losing unencrypted data on a laptop = default to encryption? A few external examples
Don’t be careless Think before disclosing to third parties Two key messages
Implied duty case law An angry model, a “small” welsh wedding, a sadomasochist and an unfaithful chef Student conversations – “off the record chats” “heart to hearts” What do you promise to the student? Confidentiality
Personal data (ordinary and sensitive) – relates to a living individual who can be identified from that data or other information which is in your possession, includes health records and expressions of opinions Postcodes Email addresses and opinions in emails When is data anonymised? DPA and definition of personal data
Sensitive data is information about race, political opinions, religious beliefs or similar beliefs, trade union membership, health, sexual life, offences, criminal proceedings Moving around information about disabilities and CRB checks Take extra care! Watch out for where accidentally information includes sensitive data DPA and definition of personal data
The police, benefit agencies and the Child Support Agency Landlords and other universities Parents, girlfriends/boyfriends (exs) and concerned relatives Sponsors and references Saying no to third party enquiries
Adrian “as not perfect Peter” Don’t lose it – keep it simple