Cyber Safety and digital citizenship in your whole-school strategy

A whole-school digital strategy answers how devices and learning apps serve your curriculum and values. Cyber Safety answers a harder question: how do we keep tamariki safe while they use those tools — at school, at home, and in the spaces between?

Without explicit Cyber Safety governance, kura drift into reactive incidents: a whānau Facebook post about an app, a syndicate using conflicting rules, or a board surprised by privacy gaps only when procurement is already signed.

This article helps principals, boards, and senior leaders embed Cyber Safety and digital citizenship in written strategy — alongside Screen Value language that clarifies purposeful device use, not only restriction.

Cyber Safety is governance, not only IT

Trustees and senior leaders own the tone and policy frame. IT teams and vendors implement controls — filtering, SSO, device management — but the board asks whether those controls match community expectations and legal duties.

Under the Privacy Act 2020, schools are agencies handling personal information. Cyber Safety overlaps with privacy: what tamariki share online, how apps collect data, and how incidents are reported. Read NAG 5, privacy, and digital tools alongside this article.

The Ministry of Education expects schools to support learner wellbeing; digital citizenship is part of that picture for most primary kura. Document your approach in the same discipline you apply to curriculum rollout on Tāhūrangi.

What to include in your written strategy

Extend your whole-school digital strategy template with a dedicated Cyber Safety section. Minimum elements:

Vision statement (one paragraph)

Describe safe, purposeful digital learning for ākonga in three years — respectful online behaviour, strong whānau partnership, tools that minimise harm by design.

Principles

Common NZ primary kura principles:

• Cyber Safety and privacy are non-negotiable for every approved tool
• Screen Value — curriculum and pedagogy lead; entertainment apps are not default learning time
• Whānau are partners — plain-language communication, not jargon
• Incident response is planned — not improvised on social media
• Equitable access — safety expectations work for shared home devices too

Roles and responsibilities

Role	Typical duties
Board	Policy approval, risk oversight, NAG 5 alignment
Principal / SLT	Strategy owner, whānau communication tone
Digital lead / ICT	Filtering, SSO, device standards
Pastoral / DPC	Incident response, learner support
Kaiako	Daily routines, classroom Cyber Safety teaching
Whānau	Reinforce agreements at home

Name individuals on an annual register — not only job titles floating in a drawer.

Approved tools and procurement

Link Cyber Safety criteria to edtech evaluation:

• Ad-free child experiences where possible
• Data minimisation and NZ-appropriate hosting
• No advertising or data sales to third parties
• Bounded child access — portals rather than open social features
• Teacher visibility without public exposure of learners

Add Screen Value evaluation when comparing vendors — safety without learning purpose wastes budget and whānau trust.

Digital citizenship progression

Document what tamariki should encounter by year band — personal information, respectful communication, reporting, scams, critical literacy. Kaiako need a shared progression, not each syndicate inventing its own. Classroom detail lives in teaching Cyber Safety in primary.

Whānau partnership plan

• Termly plain-language Cyber Safety topics sent home
• Links to whānau guides such as Cyber Safety at home and Screen Value explained
• Learning conference talking points for kaiako
• Translation or oral support for diverse communities — align with whānau engagement strategies

Incident response playbook

Define before crisis:

• Who receives first report (teacher → pastoral → principal?)
• When whānau are contacted and by whom
• Documentation standards
• When external agencies are involved
• Communication boundaries — no learner shaming in public channels

Review annually with staff; tabletop a realistic scenario once a year.

Screen Value and Cyber Safety together

Whānau hear less conflict when schools use both frames:

• Screen Value — Did this tool earn its minutes for learning?
• Cyber Safety — Are tamariki protected while they use it?

Ad-free, curriculum-aligned platforms like LearnSpace support both: bounded Kids Portal access, no child email accounts, NZ-built privacy defaults. Explore school plans when aligning procurement with strategy.

Board reporting rhythm

Add a standing Cyber Safety item each term — even if the report is brief:

• Approved tool register updated?
• Incidents and responses (anonymised)?
• Whānau feedback themes?
• One improvement action for next term?

Regular attention beats annual panic when a concern goes viral locally.

Common gaps to audit

Walk your kura through these questions:

• Do syndicates use different unapproved apps with inconsistent safety rules?
• Do whānau know which platforms are mandated and why?
• Are personal devices addressed in policy, not only school Chromebooks?
• Is staff PLD scheduled for digital citizenship, not only software clicks?
• Does procurement ask Cyber Safety and Screen Value before signature?

Use student data stewardship checklist and edtech vendor questions during audits.

Implementation timeline (suggested)

Term	Focus
Term 1	Adopt Cyber Safety principles in digital strategy; name roles
Term 2	Whānau communication launch; classroom progression shared with staff
Term 3	Tool register review; Screen Value audit of top five apps
Term 4	Incident playbook drill; board annual review

Adjust to your charter planning cycle — the sequence matters more than the exact term labels.

Connecting Cyber Safety to NAG 5 reporting

Trustees already report on learner wellbeing and legal compliance. Cyber Safety incidents — even minor ones handled well — should appear in anonymised term reports so the board sees patterns early. Pair with student data stewardship updates when apps change.

Sample standing report line:

"Cyber Safety: {N} pastoral incidents involving online behaviour; whānau communication sent; tool register unchanged / updated. Screen Value audit scheduled Term {X}."

Consistency builds confidence that digital strategy is governed, not reactive.

Working with external providers and PLD

Many kura buy digital citizenship PLD from external facilitators. Brief providers with your written progression and Screen Value principles so messages match classroom reality. Ask facilitators to reference whānau resources on the parents blog rather than generic overseas videos that may not fit NZ primary contexts.

When vendors demo products to the board, require a child-view walkthrough and a Cyber Safety appendix before approval — not only a sales deck with engagement metrics.

Review after major device changes

Cyber Safety strategy should be revisited when your kura refreshes device ratios, changes filtering providers, or adopts a new learning platform. Treat those moments like curriculum implementation checkpoints — brief staff hui, whānau update, and board note in the same term. Waiting until an incident forces change costs more trust than proactive communication.

LearnSpace as a strategic fit

When strategy emphasises Screen Value and Cyber Safety, vendors should demonstrate:

• No ads to tamariki
• Privacy-first defaults aligned with NZ expectations
• Whole-school governance — SSO, rostering, admin visibility
• Curriculum alignment verifiable against official sources

LearnSpace is designed for NZ primary kura with those defaults. Start a school trial or browse leadership articles.

Cyber Safety is not a pamphlet in the enrolment pack — it is living governance paired with purposeful Screen Value choices. Boards that write it down, name owners, and report calmly build whānau trust that outlasts any single app trend.