Best Practice Update

Graphic representing the Department for Education (DfE) Data Protection in Schools guidance update from June

DfE updates Data Protection in Schools guidance: what schools need to know

The Department for Education (DfE) updated its Data protection in schools guidance on 17 June 2026, this refresh aligns the guidance with the wider expected KCSIE 2026 guidance and reinforces existing obligations that schools should already be acting on.

This article sets out what has changed, what it means for your school in practice, and the actions your data protection lea

Read more …

DfE Filtering and Monitoring Core Standard graphic for schools and colleges, essential for safeguarding children.

The DSL’s Guide to Filtering and Monitoring

The Keeping Children Safe in Education (KCSIE) document obliges schools and colleges in England to “ensure appropriate filters and appropriate monitoring systems are in place and regularly review their effectiveness”. This responsibility is now a standard, no just a technical tick box, but a core leadership and safeguarding function.

Read more …

AI-manipulated images of smiling children, symbolizing the urgent online safety risks for schools

Guardians of Privacy: Social Media, Privacy, Children and the AI Threat

This article combines guidance from the Guardians of Privacy series, produced by Data Protection Education in collaboration with Litus Digital, with urgent new advice issued in May 2026 following confirmed blackmail attempts against UK schools using AI-manipulated images of children. Key sources include the UK Safer Internet Centre (8 May 2026) and the Internet Watch Foundation.

Read more …

Modern visitor management system for schools, balancing safeguarding, data protection, and DfE

Visitor Management: A Guide for Schools

Navigating the entry requirements for educational settings can sometimes be confusing for both the school and the visitor.  To ensure a smooth, secure, and legally compliant process, it is essential to balance safeguarding requirements with data protection principles and DfE guidance.

Read more …

A security camera representing CCTV compliance, UK GDPR, and data protection legal obligations.

Under surveillance: Why your organisation's CCTV might not be compliant

Following the popularity of our recent CCTV webinar, we've published some pointers for headteachers, governance professionals, head of operations and estates managers about CCTV compliance.

We discuss the legal obligations and common pitfalls of CCTV surveillance under the UK GDPR and Data Protection law.

Legal Foundations for Organisations

To operate CCTV lawfully, organisations must move beyond just installing camera.

Lawful basis - every camera must have a lawful

Read more …

DfE Digital Standards guidance for Wi-Fi networks, highlighting new Wi-Fi 7 and Wi

Wireless Network Standards for Schools & Colleges: What's New?

The DfE Wireless Networks is part of the DfE Digital Standards guidance and has recently been updated to include references to Wi-Fi7. You must check with this standard before you plan any Wi-Fi upgrades!

What's New?

There is a now clear guidance that specifies that any new wireless solution or upgrade must, at a minimum, meet the Wi-Fi 8 standard.

What is Wi-Fi 7?

Wi-Fi 7 provides significantly higher throughput and lower latency. In a classroom where 30 students might si

Read more …

  1. Volunteer Acceptable Use Policy & Agreement
  2. Handling Subject Access Requests (SARs) - at the end of term
  3. How should schools manage paper archives?
  4. Navigating the Redaction Divide: SAR or PEX?
  5. Records Management Toolkit: Where do I start with records management?
  6. What type of request have you received? SAR? Educational Record? Or FOI?
  7. SAR Extension Template
  8. Leavers' Memorabilia
  9. Sharing photos on World Book Day: Privacy considerations
  10. Make sure DPE is your registered DPO with the ICO
  11. Supplier Due Diligence Step by Step: Are you sharing personal data with a third party organisation?
  12. Time to kick-start your Clear Desk and Screen policy?
  13. Are Governors the Frontline of Cyber Security? (February 12th is Governors Awareness Day)
  14. DPE Webinar Schedule
  15. The Danger of the 'Data Dump': Why more information isn't always better!
  16. Introducing our new Recording and Transcription Policy
  17. Parents and students covertly recording conversations
  18. New DfE AI Standards
  19. Shareable Snippet: Office Security Best Practices for the Holidays
  20. CCTV Policy update: retention
  21. Shareable Snippet: Confidential waste
  22. Sharing information to safeguard children and young people in the education sector in the UK
  23. Fraud awareness from the DfE
  24. Complaints vs. Data Rights: A Guide
  25. Data Breach: School sends out names and contact details in a spreadsheet.
  26. September 2025 Policy and Document Updates
  27. KCSIE 2025: Data Protection, AI, and Cyber Security
  28. The Online SCR Data Breach: What You Need to Know
  29. Back to School Basics for Data Protection and Cyber Security Compliance
  30. Building a Secure School: Using the ICO Accountability Framework to Meet DfE Digital Standards
  31. Why Physical and Data Security Must Go Hand-In-Hand
  32. Digital Safeguarding: DfE announces statutory DfE Digital Standards
  33. The Data Protection Lead/Champion Role
  34. Changes to the Academy Trust Handbook 2025
  35. Social Media Day 2025
  36. How Ofsted looks at AI during inspection and regulation
  37. Preschool Employment tribunal for the use of WhatsApp
  38. Data Breaches 2025 Report Highlights
  39. Not everyone needs access: The Key to Protecting Sensitive Data
  40. West Lothian Schools in Cyber Attack
  41. National Honesty Day: Transparency
  42. FOI Request - BBC News
  43. Social Media and Marketing Guidelines and Training
  44. New Governor Resources
  45. Does stress lead to more data breaches?
  46. Are teachers using AI? 83% say its a time-saver
  47. DfE Digital Standards - narrowing the digital divide
  48. Arbor AI - On By Default
  49. DfE Guidance: Choosing a new MIS
  50. HCRG Care Group data breach
  51. The Importance of AI literacy and training staff
  52. Short Guide to AI Video
  53. Safer Internet Day, Cyber Security & Data Protection
  54. The Cyber Resilience Championship
  55. The Multiple Dimensions of Supplier Due Diligence
  56. School shares sensitive pupil information as part of an FOI response
  57. AI (Artificial Intelligence) Best Practice Area & Policy
  58. Blacon High School Cyber Attack
  59. WhatsApp and FOI's: ICO Warnings
  60. New AI Guidance from the DfE
  61. What the proposed Government legislative proposal around cyber crime means
  62. ICO report on AI tools in recruitment
  63. DfE update to record keeping and management
  64. Update to data sharing for school immunisation programmes
  65. Early Years Settings and Cyber Security
  66. SLT Digital Lead Profile
  67. The role of governors in cyber security and data protection
  68. Navigating Privacy at the End of Term , Special Occasions and End of Year
  69. Contracts Register
  70. DfE Digital Standards Autumn Update
  71. The importance of knowing how to access your CCTV footage!
  72. Cyber Attack on a Special School
  73. Stealing children's data
  74. What is dark data? (and why does it matter?)
  75. Ofqual highlights the value of cyber security training in schools
  76. Searching for data when you receive a Subject Access Request
  77. Fylde Coast Academy Trust Cyber Attack This Week
  78. Calling all IT leads in schools and mult academy trusts!
  79. Ransomware cyber attack on a school in Bromley
  80. Join Our Social Media Family!
  81. School hit by Cyber Attack
  82. Cyber Security Best Practice Area
  83. DfE Digital Standards for Schools and Colleges Tracker
  84. New Policies, Documents, Letters and Posters page
  85. Schools and Trusts Best Practice Area
  86. The DPE Retention Schedule
  87. Making the Rounds Update (now includes reporting)
  88. ESFA Cyber Essentials Requirement for Colleges from 2024/2025
  89. ICO Reprimands a School
  90. Out of date technology
  91. Data Retention and the Pupil File
  92. Have you assigned your SLT Digital Lead yet?
  93. Getting Started with AI (Artificial Intelligence)
  94. Cyber attack on a school during half term
  95. The rise of cyber attacks in schools are causing pupils to miss classes
  96. ICO: Learning from the mistakes of others report
  97. Cyber attack on a Trust; the aftermath
  98. School Focus: The Vale Federation | Aylesbury
  99. DfE Dealing with Subject Access Requests (SARs) Guidance
  100. Update to the Guidance on Information Sharing from the DfE
  101. FOI Requests generated by Artificial Intelligence
  102. Social Media Best Practice Area
  103. Lettings Best Practice Area
  104. MFA Bombing - What is it?
  105. Protecting your Social Media Accounts
  106. Checklists - Are They Your Most Powerful Compliance Tool?
  107. Product Focus on Checklists : Initial Trust Plan
  108. Product Focus on Checklists : End of Term Checklist
  109. Product Focus on Checklists : Information and Cyber Security
  110. Product Focus on Checklists : Social Media
  111. Product Focus on Checklists : Lettings
  112. Product Focus on Checklists : Record of Processing
  113. Milk Island: The secret location that allows children to view restricted content on Google Maps
  114. Why Data Should Stay Put: Benefits of Keeping Data in Its Original System
  115. Product Focus on Checklists : Data Retention and Destruction
  116. Product Focus on Checklists : Data Migration
  117. Product Focus on Checklists : Biometrics
  118. Product Focus on Checklists : Supplier Due Diligence
  119. Free Cyber help, advice and training with the Cyber Resilience Centres
  120. The Perils of Paper: The Printing Vulnerability
  121. Product Focus on Checklists : FOI
  122. Product Focus on Checklists : Governors and Data
  123. Product Focus on Checklists : DPIA
  124. Product Focus on Checklists : Site Moves
  125. Product Focus on Checklists : Data Breaches
  126. Product Focus on Checklists : Subject Access Requests
  127. Product Focus on Checklists : Bring your own device
  128. Product Focus on Checklists : Working out of school/offsite
  129. Cyber Attack on a School
  130. Product Focus on Checklists : Redaction
  131. Why Due Diligence is Important: Fake apps
  132. Product Focus on Checklists : CCTV
  133. Product Focus on Checklists : Clear desk
  134. Product Focus on Checklists : Commitment to compliance
  135. Product Focus on Checklists : Photos and video
  136. Product Focus on Checklists : Passwords
  137. Product Focus on Checklists : Information Classification
  138. Free cyber training for staff
  139. DfE Digital Standards Update
  140. The Mother of all Breaches
  141. International Data Transfers (part 1): Navigating Cross-Border Data Transfers: Understanding EU SCCs, UK Addendum, and UK IDTA
  142. ClassCharts Possible Data Breach
  143. Where is your data stored?
  144. IAPP looks at AI privacy risks
  145. If you suspect a financial scam .....
  146. School Focus: St Bernadette's Catholic Primary School | Brighton
  147. Guardians of Privacy: 16. Social Media Checklist
  148. Guardians of Privacy: 15. Navigating Social Media in Educational Settings Summary
  149. Guardians of Privacy: 14. Social Media and Cyber Bullying
  150. Guardians of Privacy: 13. Social Media, Copyright and Intellectual Property
  151. Guardians of Privacy: 12. Social Media and Going Viral
  152. Guardians of Privacy: 11. Staff Social Media Accounts
  153. Guardians of Privacy: 10. Social Media and Cookies
  154. Guardians of Privacy: 9. Social Media and Morality
  155. New Resources for Schools from the ICO
  156. Guardians of Privacy: 8. Social Media Policies
  157. Guardians of Privacy: 7. Social Media Data Retention
  158. Guardians of Privacy: 6. Posting Safely
  159. Guardians of Privacy: 5. Social Media and Consent
  160. Guardians of Privacy: 4. Social Media Access Control
  161. Guardians of Privacy: 3. Social Media Channels
  162. Guardians of Privacy: 2. Law and Regulations
  163. The ICO reprimands a Multi Academy Trust
  164. Guidance for the use of school email and applying email retention in schools
  165. Data Protection Tips for Early Years Settings
  166. Children's Privacy around the world is a puzzle
  167. Trust Initial Plan Checklist Update
  168. Records Management Best Practice Update
  169. What do I need to redact?
  170. Trust Initial Plan for Data Protection Compliance (for Multi Academy Trusts)
  171. Google for Education Resources: Helping IT Admins meet DfE digital and technology standards
  172. Lettings Best Practice and Guidance
  173. Considerations when migrating to a new MIS
  174. Public bodies and sensitive data
  175. Get a DPE Badge for your website!
  176. ICO: 10 Step guide to sharing information to safeguard children
  177. Help after a Cyber Attack/Incident
  178. Data Protection and Cyber Security (Inset Day) Training Ideas
  179. How KCSIE is linked to Cyber Strategy
  180. Handling Freedom of Information Requests the right way
  181. Where's Harry the Hacker?
  182. The ICO Reprimands a school
  183. Redaction Guidelines Updated
  184. Using WhatsApp in Schools
  185. How to contact us for support, subject access requests, data breaches and FOI's
  186. FOI: Reinforced Autoclaved Aerated Concrete
  187. FOI: Henry Jackson Society
  188. FOI: Vaccination Justifications
  189. How the Record of Processing Can Help You
  190. What does a Data Protection Officer Do?
  191. Carrying out Supplier Due Diligence
  192. How Long Should You Keep Personal Data For?
  193. B&H FoI: Racist/religious incidents/bullying
  194. Protocol for Setting Up and Delivery of Online Teaching and Learning
  195. Class Dojo International Data Sharing
  196. Model Publication Scheme: Amendments, Improvements and Updates
  197. Transparency
  198. Research projects and GDPR
  199. Secure file transfer of files using Royal Mail
  200. Emergency contacts and consent
  201. Key elements of a successful DPIA
  202. FOI Publication Schemes
  203. Best Practice for Managing Photos and Video
  204. New Drip Feeds: Recognise and Respond to Subject Access Request
  205. When to contact the Data Protection Officer?
  206. National child measurement programme
  207. Headteacher fined for breach of data protection legislation
  208. Acceptable Use Policy

Search