• Can cause undue distress to students not only within the school but in society when any how spread

• Sensitive information may be used for blackmail/further scams to make them more 'believable' - big problem when such sensitive information ends up on social media - not sure who will get access to it at the end of the day

• May lead to bullying

• Discrimination

• Breach of security that may lead to safety issue of the victim or scam

• Victim may feel exposed and lost of trust

For Individual

1. Do not store classified and sensitive information on personal devices and on unsecured cloud storage.

2. Utilise hardcopies when required. Documents should be shredded before disposal.

3. Refer to SCMobile for students' contact and health details.

4. Password protect all documents containing classified and sensitive information.

As a School

1. Educate staff on the proper labelling, storage and sharing of classified and sensitive information.

2. Sharing of classified and sesnitive information over secured channels, eg. S Drive, CES.

Medical Record Classification : Restricted Sensitive (High)

1. Cause undue stress to students

2. Loss of trust from stakeholders(students, parents, public ext)

1. Sharing of information via unsecured platforms such as WhatsApp, etc.

2. Not closing sensitive information documents before entering the class.

3. Storing of classified information in personal or unsecured devices.

   Plausible solutions:

   1. Share medical information through phone call ( verbally) privately.

   2. Ensure all sensitive folders are closed before entering the class.

   3. To save classified or sensitive informations in secured platforms or devices as communicated by ministry.

i) As individuals

• All staff should have access to classified information. Therefore, we do not need to share it (Confidential & restricted information should never be shared)

• If Form Teacher is not available (eg. having lesson), Science teacher can contact Year Head/SLs

  
  

  ii) As a school:

• Sharing of protocols with the staff

• Educating the staff on what is considered as classified

1. Miss X should not send medical information via WhatsApp. She could have given the science teacher a phone call to inform him/her on the medical history of student Y.

2. Medical information should not be saved on personal devices as they are confidential. Medical information for our form class/CCA can be accessed on SC mobile under Health.

3. Miss X should make sure programmes with sensitive information on her laptop is closed before allowing students to connect to projector.

Friendly reminder to colleagues to:

-lock your laptop when unattended

-not transfer any sensitive information to personal devices

-dispose hard copy sensitive information properly (eg: shred, place a shredder beside printer)

-dissemination of private info through corporate channels like CES.

1. Individually, we need to be mindful of the data classification and the SOP involving them. Avoid sharing, transferring and storing sensitive information on personal devices (e.g., laptops, handphones).

2. As a school, staff can be engaged at various platforms to be refreshed on the data classification and to adapt good data hygiene. Clear SOP should be disseminated to staff to ensure ease in retrieval and access for the right course of action.

Q1.

-Instead of taking a screenshot and send via WA, Ms X could have accessed SC mobile’s “Health” component on a needs basis.

-To double check that all other windows e.g. WA web to be closed before projecting onto screen.

-Should not have taken photos of class list of student particulars and medical information.