Technology Trends
Subscribe to this community
GDPR: What's your justification?
[Updated Oct.19 to add EDPB on Necessary for Contract and ICO on Consent][Updated Sep.18 to repair links broken by the demise of the Article 29 WP website][Updated Oct.17 to include an example where multiple justifications are appropri...
COVID-19 Cyber Threat Coalition and GDPR
[Notes:This isn't legal advice, but I hope it will reassure anyone considering support...
IP Addresses, Privacy and the GDPR
It's well-known that the General Data Protection Regulation says that IP addresses sho...
Remote Proctoring and Invigilation
[with thanks to a former university Head of Examinations for input and discussion]Recent years, and weeks, have seen a move away from the traditional examination context, where candidates gather in large halls to write on paper, to candidates being assessed using computers, in small groups or individual work spaces. In this change, the role of the invigilator (also known as &qu...
Wellbeing Analytics Code of Practice: Co...
[UPDATE: thanks for your feedback. Final text has now gone into the Jisc production process :)]Jisc has been providing expert, trusted advice on digital technology in the education sector for more than 30 years. We know that technology and data have the ability to transform the student experience. But, as a membership organisation owned by research and educational institutions,...
Free Text and Data Protection
Collections of free text – whether in database fields, documents or email archives – present a challenge both for operations and under data protection law. They may contain personal data but it's hard to find: whether you're trying to use it, to ensure compliance with the data protection principles, or to allow data subjects to exercise their legal rights. S...
What's the data protection difference be...
[UPDATE] a slightly revised version of this post formed our response to the ICO consultati...
Should we just log everything?
In a world where data storage is almost unlimited and algorithms promise to interrogate data to answer any question, it's tempting for security teams to simply follow a "log everything, for ever" approach. At this week...
RADIUS Server Choice Guide for eduroam
The RADIUS implementations most likely to be deployed or implemented at the present time a...
GDPR: Attendance Monitoring
A question recently arose about monitoring students' attendance at lectures and tutorials, and how this fitted into data protection law. Since the main purpose of such monitoring seems to be to identify and assist students who don't attend, and whose presence is therefore not recorded or processed, there seem to be a number of both practical and legal issues to think ab...
Data, Flows and Benefits
[A second post arising out of excellent discussions at the DALTAí project seminar in Dublin this week]We're all familiar, perhaps too familiar, with how data flows typically work online. We give commercial companies access to data...
Travelling with encrypted devices
Most portable devices – laptops, smartphones and memory sticks – should be enc...
GDPR: Recording Phone Calls
Most of us are familiar with the recorded messages at the start of phone calls that warn &...
AI and Ethics: GDPR and beyond
The EU High-Level Expert Group's (HLEG) draft Ethics Guidelines for Trustworthy AI contains four principles and, derived from them, seven requirements for AI systems. The Guidelines do not discuss the need for AI to be lawful, but ...
Federated Authentication and the GDPR Pr...
The General Data Protection Regulation's Article 4(1) establishes six principles for a...
Are networks data processors?
As the GDPR approaches, several customer organisations have asked us if the Janet network will be offering a data processor contract. Presumably the idea is that the organisation that creates an IP packet is the data controller for the...
GDPR: Official CSIRTs?
A couple of organisations have asked me recently whether the General Data Protection Regulation (GDPR) requires them to get some sort of external recognition of their incident response team. Here's why I don't think it does.Recital 49 of the Regulation says:The processing of personal data to the extent strictly necessary and proportionate for the purposes of ensuring ne...
A good Wireless Access Point with Cisco ...
Saw the follwoing question on being posed on this forum:"Going to use Route...
GDPR: Wifi access
Many, perhaps most, wifi access services want to perform some sort of authentication of people who use them (for those providing connectivity via Janet, it's a requirement of the Eligibility Policy). Since authentication involves s...
DPIAs: First Attempts
Article 35 of the General Data Protection Regulation introduces a requirement to conduct a...
Janet Training Courses in August
You might be interested to know that Janet training are running the following courses during August. Using Free Network Tools28, 30 July, 1, 8, 15 & 20 August – Live Online CourseOver 6 sessions, this online course covers the basics of Network Sniffing, from configuring networking devices to enable sniffing to occur, through to interpreting the output of the Wire...
Latest activity
JiscCommunity has been this blog's home for eight years, but I'm now moving over to JiscInform. That has many nice features, notably that it works really well on...
[UPDATE: thanks for your feedback. Final text has now gone into the Jisc production process :)]
Jisc has been providing expert, trusted advice on digital...
[with thanks to a former university Head of Examinations for input and discussion]
Recent years, and weeks, have seen a move away from the traditional...
I've been reading a fascinating paper by Julia Slupska – "War, Health and...
[Notes:
- This isn't legal advice, but I hope it will reassure anyone considering supporting the...
[Notes:
- This isn't legal advice, but I hope it will reassure anyone considering supporting the...
The EU High-Level Expert Group's (HLEG) draft Ethics Guidelines for...
Service report for organisations in Yorkshire Humberside connected to the Janet network
New videos
New ideas
Recently updated groups
Recently updated blogs
