Information Destruction and Compliant Data Handling in the Education Sector

Identity theft costs the UK economy £5.4 billion and a recent BSIA report showed 169,592 cases of identity fraud, representing an increase of 49% over the previous year.

Posted by B&M Waste

Thu 13th, Feb

Information Destruction and Compliant Data Handling in the Education Sector

Identity theft costs the UK economy £5.4 billion and a recent BSIA report showed 169,592 cases of identity fraud, representing an increase of 49% over the previous year.

Records management is an essential part of running a school, college or university, enabling you to operate within the law. Planning and implementing a compliant storage and paperwork destruction process, offered by companies such as B&M Secure Shredding across the UK, is crucial to those in the education sector.

Keeping up to date with the latest General Data Protection Regulation (GDPR) news can be quite taxing, but with the harsh penalties set by the European Parliament, it’s worth being aware of what the current state of play is.

What does the law say about compliant data handling?

Over time, education establishments will collect personal data — including those of their pupils and staff.  Whether it’s stored in a filing cabinet or backed up on an IT system, there’s a lot of data collected in schools, colleges and universities and this all needs to be considered in terms of data breach risk and ensuring this personal information doesn’t fall into the wrong hands.

To reduce the chances of any breaches, paperwork should be stored in a secure location such as a locked container or console, and can then be securely shredded in a timely manner by a vetted and accredited secure shredding company once no longer required. Education practices have a more intense responsibility for protecting personal data than some other sectors, no matter what the format is, to ensure that they comply with GDPR.

What about fines?

Other than it being the responsible and safe thing to do, securely shredding confidential paperwork can avert the risk of a potentially large fine should a data breach occur.

“As an educational establishment it’s important to us that we adopt the most secure practices to deal with the confidential student, staff and financial information we hold. We work with B&M Secure Shredding to provide secure consoles and a regular collection service, as well as clear outs at the end of term and when archives need clearing. We can be sure everything is securely shredded and then recycled. All their staff are Enhanced DBS vetted for security purposes, and we also receive a certificate of destruction which acts as a paper trail for our own records, and demonstrates our compliance” Tony Way, Site and Facilities Manager, Parrs Wood High School

What types of documents/information should be shredded?

The main data held by schools, colleges or universities is likely to be student records. Although these have to be held for a certain amount of time after a student leaves, records are likely to contain personal information such as student names, addresses and dates of birth as well as educational information, which needs to be securely held and destroyed once no longer required. 

Additionally, records relating to staff and past recruitment will be held. Some of these records may still be relevant if staff are current or left within the last few years, but older records should be disposed of securely to avoid security concerns, as these again will hold personal information.

Financial and admin records are another area to carefully consider, as keeping these records indefinitely would be best scanned, stored in the cloud and then shredded securely.

How long to keep records and secure destruction for recycling

Setting a timeframe for holding records is a good idea as you have a responsibility as a data holder to give the people the data relates to access to it while you hold it, which may prove a challenge if your records go back years, and secondly you may simply run out of space for storing it all.

Document shredding is the most secure way to dispose of old paperwork, but asking academic or admin staff to conduct these clearances using a noisy office shredder will likely not be the best use of their time. Using a secure shredding service such as B&M Secure Shredding, who will do this job for you including collection, shredding to BS EN 15713 standards and ensuring 100% is recycled, is the safest and quickest way to overcome this challenge.

Paul Curtis, Director of B&M Secure Shredding “Education establishments will have to prove that they are working with a credible organisation when it comes to disposal of confidential paperwork. B&M Secure Shredding are BSIA members accredited to ISO 9001, and are vetted to the BS EN 15713 standard, which covers the secure destruction of confidential material, so our education customers can be assured our service is of the highest quality.”

 

Leave a comment

How to take back control of your water costs

Fri 13th, Mar

While most businesses already have a comprehensive strategy in place for their electricity and gas consumption, water management is often overlooked.

How to choose an energy consultancy

Fri 13th, Mar

Most business owners recognise the advantages of shopping around for the best energy deal, but without the time, resource and expertise to find the best tariff, it can be an almost impossible task.

Business energy: Don’t get caught out by rollover rates

Fri 13th, Mar

As a busy business owner, you may feel there are not enough hours in the day to secure your next energy contract. You know you’ll get around to it, but when you’ll get around to it is another matter.

Business water matters – Top 3 water saving tips

Fri 13th, Mar

Water is often referred to as ‘the forgotten utility’. While many large businesses are clearly focussed on their comprehensive energy strategies, it seems many are yet to implement a strategy around managing their water usage.

Know where your cloud data is stored or risk a GDPR fine

Thu 27th, Feb

For businesses who have chosen cloud-based data hosting services there’s a temptation to relax and think “great, we’re paying someone else to take care of our data, we don’t need to worry about it any more.”

Transparency plans could slow down region’s business growth

Thu 27th, Feb

Efforts by regional start-up initiatives that have led to Merseyside outperforming the rest of the UK when it comes to business growth could be hampered by new government proposals, a leading legal expert has claimed.

Backup or risk losing your business

Thu 13th, Feb

Maintaining a robust backup is hard work, it’s important to not only build the correct solution for your business and trust your IT support provider to look after it, but to also maintain a sense of urgency as a business owner to...

Information Destruction and Compliant Data Handling in the Education Sector

Thu 13th, Feb

Identity theft costs the UK economy £5.4 billion and a recent BSIA report showed 169,592 cases of identity fraud, representing an increase of 49% over the previous year.

Give Your Business Utilities a Refresh for 2020

Mon 20th, Jan

January is a time for reflection for most people and this includes business owners, with the new year bringing with it an opportunity to take stock of performance during the past 12 months, create goals for the year ahead, and ensure...

The Inspired Energy Journey: Building a Business to Meet Diverse Needs

Mon 20th, Jan

Since its inception back in 2000, Inspired Energy has been working tirelessly to build the most complete utilities management solution available – a solution that can meet the diverse needs of businesses of all sizes and across all sectors.