Teacher-student messaging: online boundaries for staff

Accepted practice on staff and student messaging fits into three rules.

Keeping Children Safe in Education (KCSIE) 2026 is the statutory guidance for schools in England. It expects the staff behaviour policy to cover acceptable use of technology, staff and pupil relationships, and communication, including on social media.

KCSIE binds schools in England only. Many international schools use it as a reference, so also check what your host country and your accreditor require.

Write these three rules into your staff code of conduct and explain them at induction.

• Use only channels the school approves and can see.
• Write only what you would be happy for the Head or a parent to read.
• Message about school matters, at agreed times.

Approve a short list of channels and publish it. For most schools that means school email, the school learning platform, and school-managed accounts for clubs and trips.

The Safer Recruitment Consortium publishes UK guidance on safer working practice in education settings. It advises staff to use school devices and to contact students through their school email or login. That keeps filtering and monitoring on and leaves a record.

Agree the hours too. For online teaching, the guidance says adults should not contact students outside hours set by senior leaders. Many schools apply the same idea to all messaging.

Before you approve a new channel, check these points.

• The school owns and controls the account.
• At least one other adult can see the messages.
• The school can keep a record and export it if needed.
• The student is old enough to use the app under its own terms.
• Staff know the hours when they may message students.

A private message has only two readers, the adult and the student. Nobody else can see how the conversation started or whether it stayed appropriate.

Grooming often depends on that kind of privacy. The National Society for the Prevention of Cruelty to Children (NSPCC) says people who groom children online often move the conversation to private or encrypted messaging.

Most adults who send a private message to a student mean no harm. They want to answer a homework question or check on a child who seems down. The rule protects them too, because a kind message can be misread by a student, a parent or a colleague.

KCSIE gives being overfriendly, having favourites and one-to-one contact behind a closed door as examples of low-level concerns. A private chat has the same problem online, because nobody else can see it.

Treat all of these as private contact.

• Messages from a personal number, WhatsApp, Instagram, Snapchat or similar apps.
• Friend or follow requests, sent or accepted, on personal social media.
• One-to-one chats inside a school platform that no one else can review.
• Giving a student your personal number, email or social media handle.
• Sending a photo or file to a student from a personal account.

Yes, when the school sets them up and adults can see them. Teams, clubs and trips need a quick way to share times and changes.

Many consumer messaging apps show every member's phone number to the whole group, and the account usually sits on a personal phone. So the school should create and own the group, using a school account or a school phone.

Set these conditions before anyone starts a group.

• A school account, school phone or school platform hosts the group.
• At least two staff belong to it, or the DSL can read it.
• The group has one written purpose, such as "Year 9 football".
• Staff post only in agreed hours and only about that purpose.
• Nobody starts a private side-chat with one student from the group.
• Parents of younger students know the group exists and who belongs to it.
• The group closes when its purpose ends, and the school keeps a record under its own rules.

Students sometimes find a teacher's number or account and send a message. The Safer Recruitment Consortium guidance says the adult should not respond and must report the matter to their manager. It adds that the student should be told, firmly and politely, that this contact is not acceptable.

Your DSL decides who sends that reply, and it can be short and kind: "Thanks for getting in touch. I cannot message on this app. Please email me from your school account."

If the message says a child is unsafe or thinking of self-harm, treat it as a disclosure. Call local emergency services if the child is in immediate danger. Then tell the DSL straight away and read how to respond when a child discloses.

Do not promise to keep it secret, because you cannot. You can say: "I am glad you told me. I need our safeguarding lead to help you, so I have to share this."

Take these steps whenever a student contacts you privately.

• Stop. Do not carry on the chat on that app.
• Keep the message and take a screenshot showing the date and time.
• If it holds a nude or sexual image of a child, do not save, copy or forward it.
• Tell the DSL the same day, in person if you can, and write down what happened.
• Follow your school's child protection procedure and the DSL's advice on any reply.

Staff and students at international schools often live in the same compound, use the same gym or share a parents' group. Some social contact is normal, and it still needs a plan.

The Safer Recruitment Consortium guidance asks staff to tell senior leaders about regular social contact with a student that could cause concern. It asks them to do the same when a parent asks for their services outside work, such as babysitting or tutoring.

Use these starting rules, and adjust them for your context and local law.

• Relatives, neighbours and family friends: tell the DSL, and use school channels for school matters.
• Former students: set a rule in your code, especially for those under 18 or with siblings still enrolled.
• Video calls: avoid one-to-one sessions, and ask a parent or colleague to join if one is needed.
• Parents: reply from school email, and keep student details off personal apps.
• Trips and residentials: use a school phone and a named adult, and close the chat when the trip ends.

Write the rules into your staff code of conduct, list the approved channels, and have every adult sign at induction. Repeat the briefing every year, and include coaches, drivers and volunteers.

The Council of International Schools (CIS) child protection standards include education for leaders, teachers and students on appropriate behaviour and limits. Tell students and parents the approved channels, and say that any other contact from staff is something to report to a trusted adult or the DSL.

Your online safety policy should point to the same rules, so staff never meet two versions.

Practise the rules with short scenarios. Ask staff what they would do and what they would say in each one.

• A student sends you a friend request on a personal account.
• A student messages you at 11pm to say they feel low.
• A coach wants a team group chat for a weekend tournament.
• A parent asks you to message their child about homework on a personal app.
• A colleague tells you they chat with a student in private.

Choose platforms that keep records, then review how staff use them. Check settings such as whether one-to-one chat is switched on, and sample group chats each term. Check local privacy law first, and tell staff what you review.

Make reporting easy. A teacher who says "a student messaged me on Instagram" should get thanks and a clear next step. Staff stop reporting when they expect blame.

When a colleague breaks a rule with no sign of harm, such as sharing a homework deadline on a personal app, treat it as a low-level concern. Tell the Head, or the person your policy names, and record it.

If the messages suggest secrecy, gifts, sexual content or pressure, follow your child protection procedure and tell the DSL and the Head the same day. Local rules may require a report to a child protection authority, so ask local counsel what applies. Review these rules every year and after any incident.