CASE STUDY
CDNIS
Canadian International School of Hong Kong streamlines PDPO compliance with 9ine.
About CDNIS
The Canadian International School of Hong Kong (CDNIS) is a prestigious institution and an accredited member of the Council of International Schools (CIS). The school is committed to delivering high-quality international education, equipping students with the knowledge, skills, and abilities to thrive as global citizens. Through their partnership with 9ine, CDNIS aims to maintain high standards and accreditation by enhancing their data protection and cybersecurity measures.
Situation
CDNIS approached 9ine through their CIS membership due to challenges related to compliance with the Personal Data Privacy Ordinance (PDPO). Benjamin Smith, a representative of CDNIS, highlighted that their primary motivation was “to proactively protect our constituents' data and meet the data protection requirements for our next CIS accreditation.” This need for compliance and data protection drove CDNIS to seek 9ine's expertise.
Before engaging with 9ine, CDNIS lacked a formal data privacy compliance program. The school faced significant issues with documentation and training, making it difficult to establish and maintain a robust data protection framework.
Solution
CDNIS began their journey with 9ine through a complimentary audit offered via their CIS partnership. They subsequently adopted 9ine’s Data Protection Office Essentials and Security & Systems Essentials subscriptions. This blended service approach provided CDNIS with comprehensive support, enhancing both data protection and cybersecurity.
The collaboration with 9ine involved drafting the school’s policy notice, an essential step for transparent communication with students and staff about their data privacy rights. This initiative aligns with articles 13 and 14 of the GDPR, emphasising the importance of informing data subjects about data processing activities.
9ine’s tailored consultancy services catered specifically to the educational sector, allowing CDNIS to integrate data privacy measures seamlessly into their daily operations. The consultants helped establish a core data privacy framework, including clear roles and responsibilities across different departments, ensuring that data protection became an organisational-wide effort rather than the responsibility of a single individual or department.
Results
Through 9ine’s expertise, CDNIS experienced a significant improvement in their data privacy culture. The school saw an increase in awareness, professionalism, and expertise among staff regarding data privacy issues. The structured approach provided by 9ine helped CDNIS fast-track their data protection program, overcoming initial challenges related to documentation and training.
The periodic audits and training sessions offered by 9ine enabled CDNIS to benchmark their progress and ensure ongoing compliance with PDPO and CIS requirements. This not only improved their internal data processes but also facilitated better governance and the ability to secure affordable insurance.
Smith emphasised the importance of starting a compliance program early and allocating adequate time and resources. He noted, “Productivity has been improved because the analysis of how data moved through our processes meant we had a much better understanding of how we are actually doing business and where inefficiencies lie.” The audits conducted by 9ine provided actionable insights, helping CDNIS streamline their operations and enhance overall data security.
The proactive involvement of school leaders in the data privacy initiative, supported by 9ine’s training and consultancy, led to a stronger data protection culture. Staff became more vigilant, reporting data breaches immediately and contributing to a system of continuous improvement.
From having no formal compliance program to achieving substantial progress in data protection, CDNIS exemplifies the benefits of engaging with 9ine. The school's journey underscores the importance of taking the first step towards compliance, demonstrating that with the right support, schools can effectively manage data privacy and cybersecurity challenges.
www.cdnis.edu.hk
www.9ine.com