The challenge of e-safety law is that it is constantly evolving and has many layers. Dr Brian Bandey and Ed Macnair discuss the implications for schools

The law is evolving. Headteachers, governors and academics have all been scratching their heads recently, puzzled by changes from the Department for Education to the statutory guidance Keeping Children Safe in Education.

It is a good example of a key problem – that as the law evolves to reflect changing circumstances and risks it has become a legal minefield for schools and colleges.

The truth is that the development of the law overall is often effected not through some direct evolving “thread” of case law or amended legislation, but rather by adding layer upon layer of additional law to a pre-existing matrix which, in itself, is not particularly wieldy.

Indeed, disparate areas of the law which, historically, originate from different places and for different purposes begin to intersect with other areas of the law.

A perfect example of this was last year’s positive statutory obligations on the subject of anti-radicalisation, where law-makers added a new tier of e-safety obligations for educators. With it, schools and colleges needed to think of their IT infrastructure as an avenue through which their e-obligations may be subverted by the dark-side of the internet.

The up-shot of all of this is that there is not one seamless integrated matrix of e-safeguarding law within the current tsunami of technological, societal and child behavioural change.

Mischief abound

One thing that remains consistent, though, is what the law repeatedly says to teachers, governors, managers and ICT designers alike: “...it has been repeatedly said in cases about children that their ingenuity in finding unexpected ways of doing mischief to themselves and others should never be underestimated.”

Let us paraphrase that statement into the 21st century world in which a school, and indeed the pupils themselves, are increasingly relying on technology for their day-to-day teaching and learning. Now, it is no stretch of the imagination that a judge’s broad description of the risk would be along the lines of how children would “meddle with the school’s ICT at the risk of some significant exposure to extreme material and further meddle with it to bully and harass each other”. I doubt there would be an ICT professional across the land who would disagree with that statement.

As Dave Tonnison, director of communications and information systems strategy at Wymondham College Academy Trust in Norfolk, put it recently: “The implementation of ICT in any school or college produces tensions, such as the need to educate vs e-safety and school legal exposure, that combine to impact these institutions in ways that I believe are unique.

“For example, no other type of organisation, of which I am aware, is required to allow 80 per cent of its network users to be people with characteristics which include (some or all of) inquisitiveness, hunger for new experience, extreme competitiveness, boundless imagination, rebelliousness and self-obsession. A user group which is not only extraordinarily technology-savvy, but expert in self-justification and regularly hormone-driven.”

A morphing duty of care

The duty of care that lies upon teachers, governors, ICT risk managers and local authorities cannot be delegated away or ignored. To operate in circumstances of ignorance of the law or wilful blindness to it, affords no defence.
The toxicity of the darker corners of the web to developing minds, the interest of children in inappropriate risk-taking and the susceptibility of school ICT to be used as a vector of hostility and bullying are now inarguable facts.

Taking all of the above into account, the school and all of the personnel who support it, must look to their duty of care that arises when pupils access the school’s network. The duty of care should be institutionally acknowledged, calculated and understood, since only then can appropriate measures (whether procedural, structural or technological) be introduced so that this inescapable duty is fulfilled.

Emerging laws

e-Safety and e-safeguarding in schools is a broad, contiguous spectrum that covers everything from the exposure of minors to unsavoury pornography, to more extreme forms of cyber-bullying. Unlike the law of negligence, health and safety law has the capacity to impose criminal sanctions which are triable in the Crown Court before a judge and jury.

Last summer, there was an additional intersection added between the Prevent Duty and e-safeguarding. In the document The Prevent Duty: Departmental advice for schools and childcare providers (July 2015) it stated that: “In order for schools and childcare providers to fulfil the Prevent Duty, it is essential that staff are able to identify children who may be vulnerable to radicalisation, and know what to do when they are identified.”

Further, under the heading “IT Policies” the departmental advice adds: “The statutory guidance makes clear the need for schools to ensure that children are safe from terrorist and extremist material when accessing the internet in schools. Schools should ensure that suitable filtering is in place.”

A role for technology

As e-safeguarding law continues to develop, educational establishments will need to match their implementation of risk-assessment, procedures and technological measures to ensure they meet the legal obligations on them. Through this route of satisfying the law’s requirements, they will provide an appropriately safe level of internet access for all their students.

Many schools use specialist internet filtering tools as a means of restricting access to harmful content, however many use outdated solutions that don’t address today’s needs to be able to properly monitor cloud application use.

They therefore need to ensure that their core systems are able to track and block all the modern day vectors that could target vulnerable minors by monitoring for inappropriate phrases. Only then can educators keep pupils and staff alike safe in education establishments and ensure they are in compliance with the myriad of new and emerging laws.

  • Ed Macnair is CEO of CensorNet and Dr Brian Bandey is a leading expert on information technology law. This article is based on Dr Bandey’s legal research into e-safety law in education, which was sponsored by CensorNet.

Further information

  • Keeping Children Safe in Education, DfE (this page includes the current guidance and the new, updated guidance which comes into force from September, 2016): http://bit.ly/1XOPREp
  • The Prevent Duty: Departmental advice for schools and childcare providers, DfE, July 2015: http://bit.ly/1VqIOQ3
  • Prevent Duty: Guidance for UK home nations, Home Office: http://bit.ly/1kcoR2s