Electronic vs. Paper copies

Should you keep both electronic and paper records of some important data?

In light of the ever increasing number of cyber attacks on the education sector, and the advice given by the NCSC,

we at DPO For Education continue to advise our clients to keep both electronic and paper records of some important data.

There is an argument that people will use saying that cloud based storage saves room and minimises the amount of copies that are required. These are valid to a point and if technology is used correctly by all staff and adequate systems are in place to protect it. Evidence is growing that this is not the case in most schools.

It is worth remembering that “the loss of availability of personal data” constitutes a data breach. If a cyber-attack stops access to personal data, then a hard copy back up can help the situation.

Before the use of computers, if someone wanted to steal your data they would have to physically break into your premises and your filing cabinets, now sophisticated cyber-crime techniques mean that not only is it easier to breach your storage, but the volume of data available to a thief is significantly larger.

Where someone may have stolen a single folder in the past, cyber attackers in the current day could steal the equivalent of a lorry-load of data in mere seconds – possibly without you even noticing. Hardcopy backups of your important data can be the difference between business as usual and falling foul of a ransomware attack.

As with most things there will be arguments both ways, but particularly this Easter, we suggest you don’t put all your eggs in one basket.

Sharing Personal Data with the Police

One of the most common questions we get asked concerns sharing data with law enforcement offices. The UK GDPR does not prevent you sharing personal data with such bodies such as the police (known under data protection law as “competent authorities”) who are...

Core Principles of Data Protection

And the rights of individuals Core Principles of Data Protection Data must be processed lawfully, fairly and in a transparent manner Data must be collected for specified, explicit and legitimate purposesThe data collected must be adequate, relevant and limited to...

New Data Retention Guidance

This is a subtitle for your new post The UK government recently issued updated guidance on record keeping for academies and trusts to assist them with their record keeping obligations. Click here to be taken to the Government site....

« Older Entries

Next Entries »

Electronic vs. Paper copies