DfE issues advice on data security for schools considering using cloud services

The advice “outlines how schools need to consider data security when moving services and sensitive information to the internet-based facilities of cloud computing”, the DfE said.

The publication, which can be viewed here, covers:

• Data protection obligations;
• Key obligations for schools: overarching legal requirements; data processing; data confidentiality; data integrity; service availability; data transfers beyond the European Economic Area; use of advertising;
• Self-certification and how it works: supplier responsibilities; the Department for Education’s role;
• Using checklists; supplier checklists; accessing further information.

The advice applies to all maintained schools, academies and free schools.