Santa’s Online Safety Policy & Procedures

Last Updated: 1st October 2020

Training for Professionals Working with Children Online
Online Learning Program for Children
- Accreditation for what people need to deliver video online
- UK vetting system (Australian example - https://register.gotowebinar.com/rt/8686500703797505037)
- PDSC Digitally Aware Certification - https://www.policedsc.com/smes
- https://learning.nspcc.org.uk/news/2020/march/undertaking-remote-teaching-safely/
- https://swgfl.org.uk/resources/safe-remote-learning/
Areas to Cover in Training: What Do People Need?
- General cyber awareness:
o Cyber security
o Digitally Aware Program
o Cyber Essentials
o Scams (e.g. phishing)
o Security
o Parental controls
o Public Wi-Fi
- Finding a suitable platform:
o Necessity of using online platforms
o What to look for in conferencing solutions (features, privacy, security, etc)
o Ease of use
o How to secure Zoom & other services
o Amount of data given away by Zoom & other services
o Legal compliance of video services (e.g. GDPR compliant?)
o How many ways of recording video (or audio) calls are there (varies by platform BUT is an awareness issue)?
 Device recording e.g. iPhone screen recording – tablet/phone
 Windows/MacOS/Linux – applications incl. PowerPoint
 External Camera
- Legal Requirements
o The company providing sessions is a legitimate, valid company/organisation
o The company providing sessions has Employer & Employee Liability Insurance and Public Liability Insurance
o Recommended – Cyber Insurance
o Registered with the ICO under the Data Protection Act
- Delivering content online:
o Physical environment (background, suitable room, other people, etc)
o Appropriate appearance (dressed suitably)
o Accounts (personal vs professional)
o Consent
o Sharing information about sessions (links, passwords)
o Use of images for advertising – consent
o Locking virtual rooms
o How to keep children safe
o Starter questions for safeguarding (e.g. Is a parent close by/listening in/accompanying? Do users know how to report/flag concerns during the session? Are users in a suitable environment?)
o Monitoring sessions/moderating
o Platform features (limiting children’s use of screen sharing, private chat, recording, etc)
o Record keeping & GDPR
o Screenshots/Session recording – permission, consent & GDPR
o Staying on top of new tech - children know more
o Tricks children use to get around safety procedures
o Safeguarding during online sessions (protecting children and adults)


- Post-Content Delivery
o Remove all users from the session
o Close down meeting session properly
o Assess GDPR / Data Protection issues
o Ensure consent for retaining info etc
o Data Protection considerations for private and public meetings/webinars
o Follow up with users where necessary
o Report any issues, concerns or breaches (see: reporting)
- Reporting
o What to report – safeguarding, data protection (GDPR compliance), platform issues
o Where/how to report
o Who needs to be informed (e.g. Police, PDSC, Action Fraud, school, parents, etc)
o Ensuring all participants (especially children) know this
- Teaching online safety
o Ensure all in a session are aware of expectations & rules
o Policy for schools/organisations

Why is This Necessary?
- Legal requirement that all who work with children have has safeguarding training. Safeguarding online is very different to safeguarding in person in a controlled, closed environment.
- Zoombombing
o ‘Twitter hack teen's court date 'Zoombombed' with porn’ https://www.bbc.co.uk/news/technology-53667664
o ‘Slew of ‘Zoombombing’ child abuse cases being investigated by UK authorities’ https://eandt.theiet.org/content/articles/2020/05/slew-of-zoombombing-child-abuse-cases-being-investigated-by-uk-authorities/
o ‘More than 120 'Zoombombing' child abuse cases investigated by UK authorities’ https://news.sky.com/story/more-than-120-zoombombing-child-abuse-cases-investigated-by-uk-authorities-11990648
o ‘Police warn about ‘zoombombing’ after three more cases of child abuse videos being shared on video conferencing app’ https://www.manchestereveningnews.co.uk/news/greater-manchester-news/police-warn-zoombombing-after-three-18260876
o ‘Madison Zoom bombing incidents include intruder’s child pornography’ https://wkow.com/2020/07/24/madison-zoom-bombing-incidents-include-intruders-child-pornography/
o ‘Allegheny Valley School District investigating Zoom bombing of public meeting’ https://triblive.com/local/valley-news-dispatch/allegheny-valley-school-district-investigating-zoom-bombing-of-public-meeting/
o ‘Two virtual school meetings ‘zoom-bombed’ with porn in Tri-State districts’ https://www.fox19.com/2020/07/30/tri-state-police-investigating-pornographic-zoom-bombing-virtual-school-meetings/


- Anonymity
o Strangers having access to online spaces with children
o Children bullying/harassing others/being bullied/harassed
o Trolling
- Children able to use the internet for other purposes during online sessions
o 'Reconnecting' kid, example of tricks children use to bypass adults in online sessions
- Conduct
o Of all parties (children, adult moderators, teachers, session leaders/helpers)
o Ease of finding inappropriate content
- Best practices
o Offline requirements for working with children are vigorously enforced, e.g. DBS checks, Safeguarding training

Course Format
1st session – traditional presentation style, online, recorded, sharing information with trainees
2nd session – Trainee gives presents, conducts conference as if using with children