To help protect student, staff, and school data—and ensure compliance with China’s Personal Information Protection Law (PIPL)—NIS has a process for reviewing new digital systems, applications, and platforms before they are adopted. The protocol requires new systems to be reviewed for data collection, security, cross-border transfers, vendor compliance, and, where required, a Personal Information Protection Impact Assessment (PIPIA) and CAC Standard Contract.
- Before using a new app, platform, or digital system, submit a System Adoption Request (SARF).
- Educational systems are reviewed by the appropriate educational leadership before moving to IT for data protection and technical review.
- Operational systems are reviewed by the Director of Operations before moving to IT.
- IT will review systems for PIPL compliance, data security, storage location, cross-border data transfers, and vendor requirements.
- Please do not enter student, staff, or family data into a new system until it has been approved.
- Not sure whether something needs review? Ask IT before signing up or uploading data.
Important Links
🔗 Requestng a New System – information, guidance, and system request form:
https://nanjingschool.sharepoint.com/sites/NISTech/SitePages/Systems-and-Data.aspx
🔗 Link to the form
System Adoption Request Form (SARF).
Think before you click: Is this system approved to handle NIS data?
