Santa’s Online Safety Policy & Procedures

Last Updated: 1st October 2020

Training for Professionals Working with Children Online
Online Learning Program for Children
- Accreditation for what people need to deliver video online
- UK vetting system (Australian example -
- PDSC Digitally Aware Certification -
Areas to Cover in Training: What Do People Need?
- General cyber awareness:
o Cyber security
o Digitally Aware Program
o Cyber Essentials
o Scams (e.g. phishing)
o Security
o Parental controls
o Public Wi-Fi
- Finding a suitable platform:
o Necessity of using online platforms
o What to look for in conferencing solutions (features, privacy, security, etc)
o Ease of use
o How to secure Zoom & other services
o Amount of data given away by Zoom & other services
o Legal compliance of video services (e.g. GDPR compliant?)
o How many ways of recording video (or audio) calls are there (varies by platform BUT is an awareness issue)?
 Device recording e.g. iPhone screen recording – tablet/phone
 Windows/MacOS/Linux – applications incl. PowerPoint
 External Camera
- Legal Requirements
o The company providing sessions is a legitimate, valid company/organisation
o The company providing sessions has Employer & Employee Liability Insurance and Public Liability Insurance
o Recommended – Cyber Insurance
o Registered with the ICO under the Data Protection Act
- Delivering content online:
o Physical environment (background, suitable room, other people, etc)
o Appropriate appearance (dressed suitably)
o Accounts (personal vs professional)
o Consent
o Sharing information about sessions (links, passwords)
o Use of images for advertising – consent
o Locking virtual rooms
o How to keep children safe
o Starter questions for safeguarding (e.g. Is a parent close by/listening in/accompanying? Do users know how to report/flag concerns during the session? Are users in a suitable environment?)
o Monitoring sessions/moderating
o Platform features (limiting children’s use of screen sharing, private chat, recording, etc)
o Record keeping & GDPR
o Screenshots/Session recording – permission, consent & GDPR
o Staying on top of new tech - children know more
o Tricks children use to get around safety procedures
o Safeguarding during online sessions (protecting children and adults)

- Post-Content Delivery
o Remove all users from the session
o Close down meeting session properly
o Assess GDPR / Data Protection issues
o Ensure consent for retaining info etc
o Data Protection considerations for private and public meetings/webinars
o Follow up with users where necessary
o Report any issues, concerns or breaches (see: reporting)
- Reporting
o What to report – safeguarding, data protection (GDPR compliance), platform issues
o Where/how to report
o Who needs to be informed (e.g. Police, PDSC, Action Fraud, school, parents, etc)
o Ensuring all participants (especially children) know this
- Teaching online safety
o Ensure all in a session are aware of expectations & rules
o Policy for schools/organisations

Why is This Necessary?
- Legal requirement that all who work with children have has safeguarding training. Safeguarding online is very different to safeguarding in person in a controlled, closed environment.
- Zoombombing
o ‘Twitter hack teen's court date 'Zoombombed' with porn’
o ‘Slew of ‘Zoombombing’ child abuse cases being investigated by UK authorities’
o ‘More than 120 'Zoombombing' child abuse cases investigated by UK authorities’
o ‘Police warn about ‘zoombombing’ after three more cases of child abuse videos being shared on video conferencing app’
o ‘Madison Zoom bombing incidents include intruder’s child pornography’
o ‘Allegheny Valley School District investigating Zoom bombing of public meeting’
o ‘Two virtual school meetings ‘zoom-bombed’ with porn in Tri-State districts’

- Anonymity
o Strangers having access to online spaces with children
o Children bullying/harassing others/being bullied/harassed
o Trolling
- Children able to use the internet for other purposes during online sessions
o 'Reconnecting' kid, example of tricks children use to bypass adults in online sessions
- Conduct
o Of all parties (children, adult moderators, teachers, session leaders/helpers)
o Ease of finding inappropriate content
- Best practices
o Offline requirements for working with children are vigorously enforced, e.g. DBS checks, Safeguarding training

Course Format
1st session – traditional presentation style, online, recorded, sharing information with trainees
2nd session – Trainee gives presents, conducts conference as if using with children