Jamf School DPIA

A recent Data Protection Impact Assessment (DPIA) confirms that Jamf School’s Mobile Device Management (MDM) system is safe for schools. Conducted over two years by SIVON, the assessment highlights Jamf’s transparency and commitment to security, resulting in important system improvements that enhance digital safety for educational institutions.

The DPIA is part of the Digital Safe Education initiative, a collaboration between the Ministry of Education, Culture and Science, Kennisnet, SIVON, PO Council, and VO Council. This program promotes safe digital learning environments by setting standards and offering practical security measures for schools.

With over 20 years of experience in K-12, Jamf is the solution schools trust to deliver purposeful, scalable technology solutions. From personalizing devices to delivering powerful IT workflows, Jamf empowers IT teams, educators, and students with secure, easy-to-manage tools that enhance learning outcomes. Together with Apple, we are transforming classrooms, supporting student success, and ensuring equitable opportunities for every learner—whether an individual school, district, or an entire nation.

The DPIA found no major security risks that schools need to address. However, it identified a few areas requiring attention in local DPIAs, including:

• Admin account security – Preventing unauthorized access to avoid potential system vulnerabilities
• Role-based access control – Ensuring clear admin role assignments to enhance security
• User management risks – Avoiding excessive management rights that could compromise device security
• Support ticket handling – Addressing data privacy concerns related to customer support
• Apple Store access – Maintaining control over app installations and permissions

In response to the DPIA, Jamf has taken proactive steps to further strengthen security, including:

• Restricting unauthorized agreement acceptance to protect user data
• Increasing transparency regarding data processing purposes
• Updating the processor agreement to mitigate risks and align with compliance standards

These improvements, combined with DPIA recommendations, ensure that schools can continue using Jamf School with confidence, knowing their digital infrastructure is secure.

For institutions beyond the scope of the DPIA, this still brings confidence that the measures taken by Jamf are to ensure that the privacy and security of data is of paramount importance.

For further details, visit the Sivon website