Cyber security and data breaches
The BBC recently reported that 14 schools had been hacked with confidential information about pupils, staff and parents being leaked onto the dark web.
Files with names such as ‘contracts’ with staff pay scale and contract details, ‘passports’ with scans of pupil passports and ‘SEN information’ were among the first targeted by the cyber attackers.
Such a breach of security triggers notification to the Information Commissioner’s Office (ICO). Data controllers are required to notify the ICO without undue delay and within 72 hours of becoming aware of the data breach.
Controllers may also need to inform the data subjects (although there are some exemptions). In the reported cases, staff and pupils were informed and support was offered.
Implications for safeguarding
From a safeguarding perspective, para 144 of KCSIE 2022 states that schools are responsible for ensuring that the appropriate level of security protection procedures are in place to safeguard systems, staff and learners. The effectiveness of these procedures should be reviewed periodically.
These incidents come as a timely reminder to schools to update internal breach notification procedures, including incident identification systems and incident response plans.
Check your school’s insurance policy to ensure data breaches are covered and keep the internal breach register up to date.
Further information and support
Links to additional guidance on cyber security, including for governors and trustees, are also cited in KCSIE. (NEN and Cyber security training for school staff — NCSC.GOV.UK)
We offer a range of expert support, guidance and training for staff at all levels to mitigate and handle data breaches effectively and compliantly.
Find out more about data protection and information security for schools
Related expertise
You may be interested in...
Legal Update
Charity law update: December 2024
Online Event
Handling parent complaints against staff: Panel discussion
Legal Update
Insurance complaints surge continues
Legal Update
Walking the fine line: The statutory duty of candour and insurance
Legal Update
FCA launches consultation on broker remuneration for multi-occupancy buildings insurance
Legal Update
AI is creating fraudulent claims
Legal Update
Shoplifting epidemic by organised criminal gangs: The impact for insurers
Legal Update
Death and disgrace policies: What can insurers learn about the allegations against Gregg Wallace?
Online Event
Pupillage open evening
Press Release
Children’s Wellbeing and Schools Bill: Comments from education lawyers
Legal Update
School exclusions case confirms ‘substance over form’ is key
Press Release
Browne Jacobson continues strategic expansion in Wales with new corporate partner
Legal Update
Embedding social value in procurement
Legal Update
Stark increase in rates of school suspensions and exclusions
Online Event
Embracing AI to improve school governance
Legal Update
Navigating workplace sexual harassment laws during the festive season
Press Release
Comments on the latest SEND tribunal statistics
On-Demand
Managing safeguarding allegations against staff
Guide - PFI expiry
PFI expiry guidance for schools
Opinion
Revolutionising the Workforce: Impact of Get Britain Working White Paper
Legal Update
The power of storytelling (and curiosity)
Legal Update - London Market Quarterly
London Market Quarterly December 2024: An eye on what the market needs to know
Online Event
Supporting universities to meet their financial duties
Podcast - #EdInfluence
#EdInfluence podcast (series 4): In conversation with inspiring leaders
Press Release - School leaders survey
Browne Jacobson’s latest School Leaders Survey illustrates need for better SEND guidance as exclusions rise
Press Release
New hires at Browne Jacobson will support schools with data compliance amid enhanced ICO scrutiny
Published Article
Johnson et al v FirstRand Bank: Judgment sends warning across financial services intermediation
Opinion
Balancing employer flexibility and employee rights
Legal Update - School leaders survey
School Leaders Survey Autumn 2024: The results are in
Legal Update
Technology trends in the food and drink sector: Consumer targeting technologies
Legal Update
How the Data (Use and Access) Bill will impact the public sector
Legal Update
The ‘grate’ cheese robbery: Implications for insurance professionals
Legal Update
Environmental crime and the impact for insurers
Legal Update
Carbon fraud prompts insurance response
Legal Update
What might a Trump victory mean for the UK insurance industry?
Legal Update
Post Office scandal: Lessons for underwriters
Legal Update
Weather protection parametric insurance: A sign of things to come?
Legal Update - Be Connected (schools)
Be Connected: Schools and academy trusts November 2024
On-Demand
Shaping a culture of respect and safety: Preventing sexual harassment in our schools
