The Information Commissioner’s Office (ICO) has updated guidance to clarify when edtech services are in scope of the Children’s code. The statutory Children’s code applies to all Information Society Services (ISS) likely to be accessed by children and is designed to protect children using online products and services.

Schools are not in scope of the code because they are not classed as ISS. Edtech providers are in scope of the code if they process personal information beyond the instructions of a school and determine why and how personal information is processed. Schools have to demonstrate accountability and ensure due diligence is undertaken when procuring edtech. While the updated guidance is targeted at edtech providers, it also provides useful information to schools about the requirements of edtech providers.

For more information, check the ICO’s guidance.

Please include logo from ICO website here - https://ico.org.uk/about-the-ico/media-centre/images/