SchoolJewel
Data incident contact sheet and log
Use this if something has gone wrong with SchoolJewel information at : for example a login card sent to the wrong family, someone using another person’s account, or a message from SchoolJewel about an incident.
First hour
- Tell the school’s data protection lead: .
- Contain it: press New password for any account affected, remove an account that should not exist, and collect any misplaced cards.
- Email info@schooljewel.com, with “Data incident” in the subject line, giving what happened and which pupils or classes are involved. We will investigate on our side.
- Write down what you know in the log below.
The 72-hour rule
If an incident is likely to put people’s rights and freedoms at risk, the school must tell the Information Commissioner’s Office within 72 hours of becoming aware (ico.org.uk/report-a-breach, 0303 123 1113). If the risk to individuals is high, tell them too. If we find a breach on our side, we will tell your School Leader without undue delay, aiming for within 48 hours, and give you what you need to make your own report.
Log
| Item | Detail |
|---|---|
| Date and time discovered | |
| Who discovered it | |
| What happened | |
| People and information involved | |
| Likely effect on pupils or staff | |
| Actions taken | |
| Reported to the ICO? (date and reference) | |
| Families or staff informed? | |
| Lessons and changes |