The Data Protection Commission (DPC) is the national independent authority responsible for upholding the fundamental right of individuals to have their personal data protected. It is the supervisory authority responsible for monitoring the application of the General Data Protection Regulations (GDPR). The statutory powers, duties and functions of the DPC are as established under the Data Protection Act 2018.
The responsibility for compliance with data protection legislation rests with each school board of management. Schools/Education and Training Boards are separate data controllers from the department under data protection law and are responsible for their own compliance with the GDPR and Data Protection Act. Schools can consult with their management body and/or the Data Protection Commission (DPC) if they require further advice.
The DPC recently published a "Data Protection Toolkit for Schools" to assist with specific concerns and challenges faced by schools and following consultation with a number of organisations in the education sector. The Toolkit includes guidance on the use of technology in schools, including the arrangements of third-party service providers and on the use of personal email, laptops and devices. The DPC toolkit is available at www.oidetechnologyineducation.ie/technology-infrastructure/data-security/
You may also wish to note that the Technology in Education unit of Oide (Oide-TiE), the Department of Education and Youth funded support service for teachers and school leaders, has developed a wide range of cybersecurity guidance and resources for schools. Details can be found on the Oide-TiE Data Security Hub for Schools a www.oidetechnologyineducation.ie/technology-infrastructure/data-security/.
The guidance and supports include the following:
• A ‘Quick Guide-Cybersecurity for schools’ developed by Oide-TiE in partnership with the National Cybersecurity Centre (NCSC)
• Cybersecurity Readiness Guide for your School
• A School Cybersecurity Policy Template
• Authentication/Access Policy Guide and Template
• Cybersecurity Incident Response and Recovery Guide
• Cybersecurity Awareness and Training for School Leaders
• Cybersecurity FAQs
Cybersecurity advice and support is also available from Oide-TiE by emailing ictadvice@oide.ie.
