News

🚫🔒 Sensitive data requires a higher level of security under UK GDPR because of its potential to cause significant harm to individuals if it is lost, stolen or misused.  A recent case of a teacher losing their job after accessing a safeguarding report and transcribing it to her personal computer highlights the both the importance for least privilege access and continual review of access.

📢 Another school has been hit with a cyber attack which has resulted in parent contact information being breached.

📢 We've received several phishing emails from schools recently that look like they are sharing a Microsoft file or folder with us.

Framlingham College, a boarding and day school for pupils aged 3 to 18 has said it identified a 'cyber security incident'.

A group of 13 secondary schools, 69 primary schools and 61 nurseries in West Lothian have suffered a cyber attack.

🛡️🕷️ The Scattered Spider is a fast-growing group of cyber attackers currently on the attack and possibly attributed to the recent attack on M & S - they don't just break in and grab one thing, they like to cause as much chaos as possible and then ask for a ransom.

📢 This week the news has reported cyber attacks on several major UK retailers: Marks and Spencer, the Co-op and Harrods, all of which have given everyone a stark reminder of the ever-present and evolving threat of cyber crime.

🔒 It's World Password Day - a reminder to check how secure your passwords are and where you store that information.  There's a lot of password help and advice out there which can be confusing.  We highlight the basic things you need to be thinking about.

⚖️🛡️ National Honesty Day, although one day to highlight the importance of honesty, it reminds us of how importance truth is in the realms of data protection and cyber security and how it should be part of an organisation's fundamental beliefs and ethos.

This article shares advice we have given to several customers who have received an FOI request from the BBC News about conducting research into the challenges of handling harmful sexual behaviour in schools.

📢📱 We've updated our Social Media Best Practice Area to include more information about marketing, including a new training course.

📢🏛️ We've published some new resources for governing bodies about data protection and cyber security.  Governors can be added to our Knowledge Bank platform as part of your subscription with us at no extra charge.

😓💻  When organisations approach the end of a busy and stressful time, or as they rush to finish for a long weekend or holiday, we see a huge spike in data breaches reported to us. 

🔄☁️ Having a robust backup is being prepared against data loss and data theft.  March 31st is World Backup day to remind everyone of the importance of having a robust and accessible backup.

🤖🕒 Most meetings we are having with schools at the moment feature conversations and questions around the use of AI by staff in  organisations.  It's clear the landscape is rapidly evolving and education may not be moving as fast, however, it does help to be prepared.

💻📢 The DfE are seeking views on proposals for narrowing the digital divide in schools and colleges.  It outlines the DfE's long-term vision for narrowing the digital divide in schools and colleges.

💻 ⚠️ Arbor recently announced that it was including some AI as part of it's default configuration - some customers have raised questions about this with us.

✅📃 An MIS (management information system) is a critical part of the school's day to day operations and digital infrastructure.  They can be on premise or in the cloud, which means contract terms can differ.  We highlight the latest guidance alongside what is already data protection law - you should follow this, even if you are procuring your MIS through your local authority or third party IT provider.

📸✅ It's World Book Day on the 6th March when most schools will be celebrating reading and capturing photos of staff and students in their costumes.   Given this is one of many significant photographic events in the calendar, we thought it was a good opportunity to remind everyone of photo and video best practice.

Some of our customers have been affected by the data breach reported by the HCRG Care Group.  The group is currently investigating claims by a ransomware group that more than two terabytes of sensitive information has been breached.

☁️📲Apple has taken unprecedented steps to remove its highest level data security tool from customers in the UK - the reason?  The UK government demanded access to user data.

🤖✅There is no doubt that AI is here to stay as it transforms organisations by helping to automate tasks, increase productivity and efficiency while influencing decision making.  However: "With great power comes great responsibility".

✅🔍 We visit a lot of schools and have a lot of conversations about documentation we are asked to provide as new and returning visitors to organisations. Sometimes we don't agree with what the organisation is asking for, so we thought we'd give some clarification about regulatory requirements.

🔚Microsoft will officially end support for Windows 10 on October 14th 2025 - this means no more security updates, bug fixes or technical support.

🎥🤖  Some of the organisations we are talking to are a little confused about AI, whether they should use it and if their staff already are using it or not.  We've put together a short video explaining the different types of AI, the risks and how you should start documenting your use.

🛡️🔒We couldn't get through today without mentioning it's Safer Internet Day today (11th February).  And while we don't need a special day to talk about being safe online, cyber security and data protection, we welcome any chance to highlight how important they all are.

🏆🥊🛡️When we meet with schools we are often asked whether we think they should be looking at the DfE Digital Standards or Cyber Essentials, aren't they the same?

✅ 🔒 Organisation's rely heavily on third-party software suppliers for day to day business.  We explore the critical aspects of software supplier due diligence and why it should be a priority for every organisation.

Using a statutory instrument on Jan 27th 2025, the Secretary of State for the Department for Science, Innovation and Technology has increased the data protection fees to be paid by data controllers.
Tier 1 (micro organisations) from £40 to £52; Tier 2 (small and medium organisations) from £60 to £78; Tier 3 (large organisations) from £2,900 to £3,763. This change will come in from February 27th 2025 and will be charged when your payment is next due.

A reminder for

🚨  Pupils' sensitive data was shared 'by mistake' by Wellsway School in response to an FOI.  🚨