– without risking breaching the GDPR?
A school in a small municipality in central Sweden is facing major challenges in terms of handling digital information about students since the Data Protection Regulation* came into force on May 25, 2018. Article 48 (Data Protection Regulation) clearly states that personal data may not be disclosed to third countries as long as there is no international agreement (for example, the CLOUD Act).
The municipality already has existing services for communication between pupils and teachers (Google Apps, Office 365) and services for communication between parents and teachers (Schoolsoft, etc.). But when it comes to sharing information about, for example, student development, medical information, special diet, protected identity and special needs between teachers, counselors, school nurses, social services, child and adolescent psychiatry and others, there is a lack of a good tool.
How can a municipality/school share both sensitive and non-sensitive information without risking breaching the GDPR?
Solution:
Storegate – Access, collaborate on and share common files with full control.
- Avoid storing data in a way that contravenes the GDPR by using a Swedish cloud service.
- Sensitive information is protected.
- Avoid investing in and managing the operation of your own infrastructure.