Why it is best practice not to use your personal email address for scouting…
If you look back, it’s not just presidential candidates who need to be aware of the dangers of using a personal email account for business matters. Should your scout group, explorer scout unit, district or the county receive a data subject access request, and you use your personal email address or mobile number (for messaging) for scouting business, you may be required to disclose information held on personal email accounts or mobile phones.
If you use your personal email accounts to conduct ‘charity business’, because setting up and operating separate email accounts for dealing with such business can be burdensome this may be inconsistent with good record keeping and data security and can pose particular problems for you if your scout group receives a data subject access request (SAR) for disclosure of personal data held by the organisation about an individual.
Take, for example, a SAR is received by your scout group by a former leader. The SAR is likely to catch information held by or on behalf of the group. If your group secretary has been using their private email account to send emails in their official capacity, then your scout group remains the data controller for any personal data that is sent, received or stored on their account(s).
The fact that the group does not have ready access to those private accounts does not mean that the data falls outside the scope of the SAR. Your group could find itself on the receiving end of an investigation by the Information Commissioner’s Office if a claim that any personal data held on their accounts falls within the scope of the request. This may extend, for example, to text messages on personal mobile phones where they were used to carry out group business.
What are the advantages of using privately hosted email?
- All emails are hosted on a private enterprise class server meaning potentially sensitive information is kept safe. Free email accounts are consumer products and do not provide users with the same level of privacy, protection or support.
- Data is backed up so you can retrieve something you may have deleted by mistake.
- With a custom domain name such as your.name@bradfordsouthscouts.org.uk, Parents and outside organisations can be a lot more confident of your identity when receiving emails. Anyone can set up a free Gmail or Hotmail account with something similar to 68thbfdsth@gmail.com and pose as a leader. We want to make sure our adult members are protected from identity theft and safeguard our young people from imposters.
- A Scouting email address allows you to manage and maintain a Scout-Life balance by keeping your Scouting mailbox separate from your personal inbox.
- It looks professional. Quite often Scouting will lead you to have contact and dealings with public officials, MPs, Councillors, Business leaders and having your own custom scout email address will give a much better impression.
Summary
With this in mind it really is best practice to set up separate email accounts for your group as required and the use of personal accounts should not be used and this should be made clear in your welcome to new adults and your policies and procedures.
In short, the leaders in your group and the members of your group Trustee Board should be aware of the implications of using their personal email accounts for ‘charity business’. At the very least they should be made aware that they may be compelled to hand over data from private email accounts or personal mobile phones, where it falls within the scope of a third-party request.
The reasons listed above are why Bradford South have rolled out a dedicated secure email platform for members of the district team, and potentially this is why individual groups should be discussing the above with their Trustee Boards and existing members