¿Qué hacer si la privacidad y la seguridad de los datos de su institución educativa están en riesgo con las nuevas tecnologías?

Conduct a comprehensive assessment of the potential risks and vulnerabilities associated with the new technology, including data breaches, unauthorized access, and compliance with privacy regulations. Review and update existing data privacy and security policies, procedures, and protocols to address the specific risks posed by the new technology. Ensure that all staff members are aware of their responsibilities and obligations regarding data protection.

Ensure that you capture the wider picture. Educators are focused on getting the best outcomes for their children or finding something that makes their already busy role easier. When doing this they do not always consider the data risks and they will not always be asking for permission. Make sure that your risk assessment captures ALL of the software, websites, apps that are in use where data might be getting stored. Each one of these poses a reputational risk.

With the rapid changes occurring in this area right now, it might be advisable to seek out someone with expertise in the area of risk assessment. The practices should be explained to you in a way that is clear and understandable. However, this area may exceed the skills of educational leadership. By consulting with a professional that focuses specifically on risks, you can effectively develop a strategy and practices that are informed and appropriate for your school system.

Focus on a comprehensive data inventory: Data types: Go beyond PII to include student records, attendance, biometrics (if used), and any identifiable information. Data location: Track where data resides - institutional servers, cloud platforms (location matters!), or a mix. This is crucial for regulations and security assessments. Third-party tools: Identify all online tools and apps used by staff and faculty. This includes learning management systems, communication platforms, assessment tools, and any software that stores or accesses institutional data. Data sharing agreements: Review existing agreements with third-party vendors to ensure proper security protocols and data protection responsibilities are outlined.

Ensure that your policy has guidance on how innovative educators can explore new apps and technology. Give them a route and tools to help drive forward educational quality in your institution, this is, after all, the primary purpose. We must ensure that tech works for us and not the other way around.

Keeping policies updated is a much more time consuming task with the rate of change technology is currently facing. As new legislation emerges, policy will need to be reviewed. It would be a good practice to have a schedule to regularly revisit the policy and create a diverse panel to make sure all of the perspectives are being fairly and consistently represented.

Secure technology habits start with your staff. Workshops can equip them to spot phishing scams, craft strong passwords, and safeguard sensitive data. Simulations will further sharpen their skills, placing them in real-world scenarios where they make data-sharing and app permission decisions on the fly. Empower tech-savvy staff to train their colleagues, fostering a collaborative learning environment. This should flow into your curriculum. Weave digital citizenship lessons throughout different subjects, teaching responsible online behaviour. This is a continuous journey. Regularly update staff on evolving cyber threats and best practices. Ultimately, cultivate a culture where secure technology use is a shared responsibility.

Ensure that your tech team is ITIL qualified or similar and that the library is applied in day to day operations. Having a well trained tech team with responsive and customer focused approach to supporting your teams will help to keep everybody working effectively.