Collecting Staff Vaccination Data

Collecting Staff Vaccination Data

There is no quick answer as to whether schools are legally permitted to collect vaccination data.  

As well as considerations under data protection law, employers must also be mindful of obligations arising under areas such as employment law, equality legislation, and human rights law.

From a data protection perspective, there are some initial steps that employers can take to help achieve compliance:
  • Consider the objective you are trying to achieve/purpose for collecting the data.  
  • If you do need to collect vaccination data, can you identify a legal basis under UK GDPR?  
  • Ensure the security and confidentiality of the information 
  • Be open and transparent with staff 
  • Document everything and maintain a retention policy
If you have any questions or concerns you should speak to your Data Protection Officer.
Schools have responsibility but not control over pupils’ data

Schools have responsibility but not control over pupils’ data

New report states “Schools have responsibility but not  control over pupils’ data”  A new report by the Digital Futures Commission recommends that the government ‘s Data Reform Bill should regulate data taken by educational technologies (EdTech) services widely used...

New school resources for teachers

New school resources for teachers

The ICO has produced a suite of school resources for teachers to use when discussing privacy issues and the value of personal data. The lesson plans cover what counts as personal data, why it’s valuable and how to keep it safe when using social media. The resources...

Are Educational Institutions at risk from a phishing attack?

Are Educational Institutions at risk from a phishing attack?

Absolutely they are!  The Cyber Breaches 2022 Survey Education Annex has some brilliant insights into what educational institutions are currently facing in terms of cybercrime and as in previous years, phishing is the top detected cyber-attack and it’s easy to see...