Technology Trends
Subscribe to this community
GDPR: What's your justification?
[Updated Oct.19 to add EDPB on Necessary for Contract and ICO on Consent][Updated Sep.18 to repair links broken by the demise of the Article 29 WP website][Updated Oct.17 to include an example where multiple justifications are appropri...
What's the data protection difference be...
[UPDATE] a slightly revised version of this post formed our response to the ICO consultati...
Free Text and Data Protection
Collections of free text – whether in database fields, documents or email archives – present a challenge both for operations and under data protection law. They may contain personal data but it's hard to find: whether you're trying to use it, to ensure compliance with the data protection principles, or to allow data subjects to exercise their legal rights. S...
GDPR: Backups, Archives and the Right to...
I was recently asked how the GDPR's Right to Erasure would affect backups and archives. However that right, created by Article 17 of the GDPR, only arises when a data controller no longer has a legal basis for processing personal data. Provided an organisation is implementing an appropriate backup and archiving strategy, that shouldn't happen.The key point is that backu...
Remote Proctoring and Invigilation
[with thanks to a former university Head of Examinations for input and discussion]Recent years, and weeks, have seen a move away from the traditional examination context, where candidates gather in large halls to write on paper, to can...
GDPR: Alumni processes
Most universities maintain databases of alumni, for purposes including keeping them informed about the organisation, offering services and seeking donations. These activities have a lot in common with other charities, so the Informatio...
GDPR: Attendance Monitoring
A question recently arose about monitoring students' attendance at lectures and tutorials, and how this fitted into data protection law. Since the main purpose of such monitoring seems to be to identify and assist students who don't attend, and whose presence is therefore not recorded or processed, there seem to be a number of both practical and legal issues to think ab...
Travelling with encrypted devices
Most portable devices – laptops, smartphones and memory sticks – should be encrypted so that the information they contain is protected if the device is lost or stolen. Many countries (including the UK) give their immigration and other authorities legal powers to demand that you decrypt an encrypted device though given the number of laptops that cross borders every d...
GDPR: Recording Phone Calls
Most of us are familiar with the recorded messages at the start of phone calls that warn "this call may be recorded for compliance and training purposes". Some may recognise it as meeting the requirement to notify callers under the snappily titled Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000. But the data protection i...
Format of FreeRADIUS log to enable inter...
ContentsScopePrelimiary work with FreeRADIUSFTICKSContributors: Adam Bishop, Alan Bu...
RADIUS Server Choice Guide for eduroam
The RADIUS implementations most likely to be deployed or implemented at the present time are:FreeRADIUS – a free, open source implementation: http://www.freeradius.org/Microsoft NPS (Network Policy Server) - the Windows Server 20...
Federated Authentication and the GDPR Pr...
The General Data Protection Regulation's Article 4(1) establishes six principles for a...
Investigatory Powers Act - process detai...
The Government's powers make orders relating to information about communications have now moved from the Regulation of Investigatory Powers Act 2000 to the Investigatory Powers Act 2016. The associated Code of Practice provides use...
A good Wireless Access Point with Cisco ...
Saw the follwoing question on being posed on this forum:"Going to use Router Cisco 1921/K9 What would be a good Wireless Access Point for this System T1 line for up to 20 people. Which AP should i take ?"A...
Wellbeing Analytics Code of Practice: Co...
[UPDATE: thanks for your feedback. Final text has now gone into the Jisc production process :)]Jisc has been providing expert, trusted advice on digital technology in the education sector for more than 30 years. We know that technology and data have the ability to transform the student experience. But, as a membership organisation owned by research and educational institutions,...
Wellbeing analytics: legal explorations
While colleagues are looking at whether data can be used to pick up early signs of mental ...
Learning Analytics Dashboards
Learning analytics dashboards, like the class mark books that long preceded them, show tutors a lot of information about their students. That could be pretty intrusive, so should universities and colleges be asking students to consent ...
DPIAs: First Attempts
Article 35 of the General Data Protection Regulation introduces a requirement to conduct a...
Intelligent Campus: Risks, Benefits and ...
[Re-purposing an unused introduction to my full paper - "See no... Hear no... Track n...
Federated Access Management and the GDPR
[this article is based on the draft text published by the European Council on 28th January...
GDPR: Official CSIRTs?
A couple of organisations have asked me recently whether the General Data Protection Regul...
Draft Wellbeing Analytics Code of Practi...
Following on from my previous blog post on the possible uses of wellbeing analytics, we'd very much welcome comments on this latest draft of our Code of Practice. Note that this includes the maximum safeguards from all legal bases that seem likely to apply, so even if our continuing investigations conclude that some of those bases are not appropriate, the Code's recomme...
Latest activity
The Community group for the Jisc Assent Service launched on 25 March 2015
Jisc, as the service operator, will post things on here relevant to the service but...
JiscCommunity has been this blog's home for eight years, but I'm now moving over to JiscInform. That has many nice features, notably that it works really well on...
[UPDATE: thanks for your feedback. Final text has now gone into the Jisc production process :)]
Jisc has been providing expert, trusted advice on digital...
[with thanks to a former university Head of Examinations for input and discussion]
Recent years, and weeks, have seen a move away from the traditional...
I've been reading a fascinating paper by Julia Slupska – "War, Health and...
[Notes:
- This isn't legal advice, but I hope it will reassure anyone considering supporting the...
[Notes:
- This isn't legal advice, but I hope it will reassure anyone considering supporting the...
The EU High-Level Expert Group's (HLEG) draft Ethics Guidelines for...
