Schools and the oversharing of personal data

The privacy act of 1988 prevents the sharing of personal data with a 3rd party without consent. Since then in the wake of the recent cyber incidents in well known Australian industries particularly telecommunications and health these laws have been tightened. Personally Identifiable Information (PII) is not to be shared with any 3rd party.

Currently schools throughout Australia are required to complete privacy impact assessments when enroling students to a new online platform yet many schools are still publishing student full names, birthdays and the class students are in at school in newsletters and on social media. So why do some schools still share the full name of students and teachers in newsletters. In the research for this article there were schools found to still be publishing: 

  • images of children with their full name
  • full names of students
  • example of sharing student full name including middle names
  • classes of students with their full name
  • student names and their class or year
  • posts about student birthdays being this week, one published the date with their full name.
To protect the identity of these schools they will not be named and shamed. Schools may defend this practice by saying parents sign a waiver, but many waivers are are frequently not explained and often designed for marketing material and do not allow parents to specify the data they would like withheld or published.

Parents should be able to indicate if they would like students picture without a name or first name only. It is in the interests of the children that schools publish images without names and first name only or initials only. Under no circumstances is there a need for student middle names or birthdates to be published in a public space.

Schools should be considerate of how they publish information pertaining to students. We should also consider should social media and old news letters be archived at the conclusion of each year to further protect students.

This goes further to the protection of personal data for teachers and parents. Should schools be publishing full names of teachers and parents in newsletters and on their social media? Do parents and students sign a waiver for this practice?

The current practice of schools means students could have an extensive digital footprint created by the school by the time they leave school. Search for your children to find the extent of their digital footprint and how your child's school has contributed to this footprint.

What is Personally Identifiable Information (PII)

References

https://www.schoolgovernance.net.au/news/2017/10/12/information-sharing-and-schools-part-1-balancing-privacy-obligations-how-schools-can-ensure-that-sharing-is-caring

https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/small-business-cyber-security/securing-customer-personal-data 

Comments

Popular posts from this blog

Digital Literacy and online testing part 2

Digital Literacy and online testing - part 3

Digital Literacy and Online Testing

Digital Skills for Online Testing: Part 4

National Simultaneous Storytime 2024

Using picture books to teach computational thinking

Literacy and Digital Technology

Hopper DownUnder and thoughts on Girls and Technology

Tools to keep kids learning STEM concepts and skills at home