News

✅🔍 We visit a lot of schools and have a lot of conversations about documentation we are asked to provide as new and returning visitors to organisations. Sometimes we don't agree with what the organisation is asking for, so we thought we'd give some clarification about regulatory requirements.

🔚Microsoft will officially end support for Windows 10 on October 14th 2025 - this means no more security updates, bug fixes or technical support.

🎥🤖  Some of the organisations we are talking to are a little confused about AI, whether they should use it and if their staff already are using it or not.  We've put together a short video explaining the different types of AI, the risks and how you should start documenting your use.

🛡️🔒We couldn't get through today without mentioning it's Safer Internet Day today (11th February).  And while we don't need a special day to talk about being safe online, cyber security and data protection, we welcome any chance to highlight how important they all are.

🏆🥊🛡️When we meet with schools we are often asked whether we think they should be looking at the DfE Digital Standards or Cyber Essentials, aren't they the same?

✅ 🔒 Organisation's rely heavily on third-party software suppliers for day to day business.  We explore the critical aspects of software supplier due diligence and why it should be a priority for every organisation.

Using a statutory instrument on Jan 27th 2025, the Secretary of State for the Department for Science, Innovation and Technology has increased the data protection fees to be paid by data controllers.
Tier 1 (micro organisations) from £40 to £52; Tier 2 (small and medium organisations) from £60 to £78; Tier 3 (large organisations) from £2,900 to £3,763. This change will come in from February 27th 2025 and will be charged when your payment is next due.

A reminder for

🚨  Pupils' sensitive data was shared 'by mistake' by Wellsway School in response to an FOI.  🚨

📢🤖📢 We are pleased to announce our AI Best Practice Area & AI Template Policy

🏴‍☠️ 📢 A school is closed today and tomorrow as the result of a ransomware cyber attack.

📲💬 We come across many organisations using WhatsApp as a communication tool with staff regularly and have previously highlighted some of the risks.  The ICO have recently published information about a case where WhatsApp messages had to be included in a Freedom of Information Request.

📢📢 The DfE has recently published new guidance and resources about using Artificial Intelligence in a school environment.

🗝️🛡️ In a world where cyber attacks are becoming increasingly sophisticated, protecting sensitive information and user accounts has never been more critical. Traditional passwords are rapidly being replaced by a more advanced and secure solution: passkeys. This article explores the benefits of passkeys, their role in preventing cyber attacks, and what to do if a system does not yet support them.

🛡️🖥️  Today the Government launched a consultation period about introducing legislation to counter ransomware.

📢📢 Data Protection Education are running a new webinar schedule for 2025!

🤖🤖 The ICO recently published an overview reports about the use of AI tools in recruitment processes.  While it was recognised that it can offer benefits to employers, it recognises their use can also lead to risks for people and their privacy and information rights.

📂 📄 The DfE issued an update to data sharing and record keeping and management in December.

In December (2024) there was an update to data sharing guidance for school immunisation programmes.

🧸 🚼 As digital technology continues to increase in our educational settings, Early Years settings are increasingly integrating digital tools into their operations.  While this might enhance efficiency and communication, it also raises concerns and challenges about cyber security and data protection.

👩🏽‍🏫👨🏽‍💻 Since we have been talking to schools and multi academy trusts about the SLT digital lead, there have been a lot of questions about who that should be in the organisation. There’s often an assumption that it should automatically be the IT Manager, technician, or Data Protection Lead.  In this article, we explore the profile of an effective SLT Digital Lead and their critical role in shaping digital strategy, integrating technology into teaching and learning,

🛡️ The National Cyber Security Centre has recently published an article about ransomware resistant backups.