Parents of a school in Birmingham are concerned that a school has accidentally shared a spreadsheet which contained student names for children in Year 7 to Year 11 and parental contact details.

We've updated and added some new policies, including the Data Protection Policy, Model Redaction Guidelines, Data Rights Complaints Process, Freedom of Information Policy, SAR Procedure Template, SAR Response Template, Subject Access Request Clarification Template.  This article shows an amendments made to the documents.

The latest release of the "Keeping Children Safe in Education" guidance brings important updates for schools and colleges, including points relating to the rapidly evolving digital landscape.  Most of the changes in this year's guidance are technical.

The recent data breach involving Online SCR, an online provider of single central record (SCR) services, has put the personal data of education staff at risk.  The breach was a result of a cyber attack on a subcontractor.

As schools begin to welcome back students, staff and new joiners, the focus is on the new academic year: curriculum planning, safeguarding and operational logistics.  An equally critical and statutory area that demands attention is data protection and cyber security compliance.  Adhering to data protection law isn't just about avoiding fines; it's about protecting sensitive personal data of children, their families and staff.

The ICO Accountability Framework is a crucial tool for any organisation handling personal data, providing a structured approach to data protection compliance. When applied to the Department for Education (DfE) Digital Standards, it becomes a powerful mechanism for schools and trusts to ensure their technology and data practices are not only efficient but also legally compliant and secure.

The sight of a ransacked classroom is unsettling, especially for a junior school community. A break-in is not just about the cost of a new window or a replacement laptop; it is also about the potential loss of sensitive data.  Greenfields Junior School, in Green Lane, was broken into during the summer holidays.

The DfE has published the report for their consultation: Narrowing the Digital Divide in Schools and Colleges, with the conclusion that schools can and want to meet the standards by 2030.

We often see a rise in the number of Subject Access Requests received by schools at the end of term or at the end of the academic year.  This article, therefore, covers guidance and support around subject access requests, how to recognise them and how to respond.

As the academic year draws to a close, schools eagerly prepare to celebrate the achievements and fond memories of their students with end of year events. Sports days, graduation ceremonies, academic achievements, leavers events - these occasions are a highlight for pupils, staff and parents and sharing on social  media often seems like the obvious way to share that information and celebration.

So, you've been asked to be the data protection champion/lead in your organisation!  We explain what that means for Data Protection Education customers.

The changes to the Academy Trust Handbook will be effective from 1st September 2025 and include some statutory digital standards recommendations.