Network and technology advice
Subscribe to this community
GDPR: What's your justification?
[Updated Oct.19 to add EDPB on Necessary for Contract and ICO on Consent][Updated Sep.18 t...
COVID-19 Cyber Threat Coalition and GDPR
[Notes:This isn't legal advice, but I hope it will reassure anyone considering supporting the COVID-19 Cyber Threat Coalition that the data protection risks should be very low;This only covers the use of data for defending systems, networks, data and users; use for offense, including attribution and evidence, is covered by separate legislation, which varies much more betwee...
Choose the right metaphor
I've been reading a fascinating paper by Julia Slupska – "War, Health and E...
Remote Proctoring and Invigilation
[with thanks to a former university Head of Examinations for input and discussion]Recent years, and weeks, have seen a move away from the traditional examination context, where candidates gather in large halls to write on paper, to candidates being assessed using computers, in small groups or individual work spaces. In this change, the role of the invigilator (also known as &qu...
How Should Education use AI?
In looking at the many ethical concerns that have been expressed about the use of Artifici...
Wellbeing Analytics Code of Practice: Co...
[UPDATE: thanks for your feedback. Final text has now gone into the Jisc production process :)]Jisc has been providing expert, trusted advice on digital technology in the education sector for more than 30 years. We know that technology and data have the ability to transform the student experience. But, as a membership organisation owned by research and educational institutions,...
Free Text and Data Protection
Collections of free text – whether in database fields, documents or email archives &...
GDPR: Alumni processes
Most universities maintain databases of alumni, for purposes including keeping them informed about the organisation, offering services and seeking donations. These activities have a lot in common with other charities, so the Information Commissioner's guidance is relevant. Indeed the Information Commissioner's recent description of using consent-based relationships &quo...
Travelling with encrypted devices
Most portable devices – laptops, smartphones and memory sticks – should be enc...
GDPR: Recording Phone Calls
Most of us are familiar with the recorded messages at the start of phone calls that warn &...
Should we just log everything?
In a world where data storage is almost unlimited and algorithms promise to interrogate da...
GDPR: Backups, Archives and the Right to...
I was recently asked how the GDPR's Right to Erasure would affect backups and archives. However that right, created by Article 17 of the GDPR, only arises when a data controller no longer has a legal basis for processing personal d...
Data, Flows and Benefits
[A second post arising out of excellent discussions at the DALTAí project seminar in Dublin this week]We're all familiar, perhaps too familiar, with how data flows typically work online. We give commercial companies access to data about ourselves; they extract some benefit from it, for example by selling profiled advertising space; they share some of that benefit back to u...
GDPR: Official CSIRTs?
A couple of organisations have asked me recently whether the General Data Protection Regulation (GDPR) requires them to get some sort of external recognition of their incident response team. Here's why I don't think it does.Recital 49 of the Regulation says:The processing of personal data to the extent strictly necessary and proportionate for the purposes of ensuring ne...
Federated Access Management and the GDPR
[this article is based on the draft text published by the European Council on 28th January...
Are networks data processors?
As the GDPR approaches, several customer organisations have asked us if the Janet network ...
the problem of 802.11d and Mac OSX
There seems to be a nice issue with how Macs do their 802.11d http://jeff-with-a-g.bl...
Draft Wellbeing Analytics Code of Practi...
Following on from my previous blog post on the possible uses of wellbeing analytics, we...
GDPR: Wifi access
Many, perhaps most, wifi access services want to perform some sort of authentication of people who use them (for those providing connectivity via Janet, it's a requirement of the Eligibility Policy). Since authentication involves s...
Latest activity
JiscCommunity has been this blog's home for eight years, but I'm now moving over to JiscInform. That has many nice features, notably that it works really well on...
[UPDATE: thanks for your feedback. Final text has now gone into the Jisc production process :)]
Jisc has been providing expert, trusted advice on digital...
[with thanks to a former university Head of Examinations for input and discussion]
Recent years, and weeks, have seen a move away from the traditional...
I've been reading a fascinating paper by Julia Slupska – "War, Health and...
[Notes:
- This isn't legal advice, but I hope it will reassure anyone considering supporting the...
[Notes:
- This isn't legal advice, but I hope it will reassure anyone considering supporting the...
The EU High-Level Expert Group's (HLEG) draft Ethics Guidelines for...
Service report for organisations in Yorkshire Humberside connected to the Janet network
New videos
New ideas
There have not been any ideas added to this community recently. Do you have a great idea to share?
