Best Practice Update

A security camera representing CCTV compliance, UK GDPR, and data protection legal obligations.

Under surveillance: Why your organisation's CCTV might not be compliant

Following the popularity of our recent CCTV webinar, we've published some pointers for headteachers, governance professionals, head of operations and estates managers about CCTV compliance.

We discuss the legal obligations and common pitfalls of CCTV surveillance under the UK GDPR and Data Protection law.

Legal Foundations for Organisations

To operate CCTV lawfully, organisations must move beyond just installing camera.

Lawful basis - every camera must have a lawful

Read more …

DfE Digital Standards guidance for Wi-Fi networks, highlighting new Wi-Fi 7 and Wi

Wireless Network Standards for Schools & Colleges: What's New?

The DfE Wireless Networks is part of the DfE Digital Standards guidance and has recently been updated to include references to Wi-Fi7. You must check with this standard before you plan any Wi-Fi upgrades!

What's New?

There is a now clear guidance that specifies that any new wireless solution or upgrade must, at a minimum, meet the Wi-Fi 8 standard.

What is Wi-Fi 7?

Wi-Fi 7 provides significantly higher throughput and lower latency. In a classroom where 30 students might si

Read more …

Redaction guide for PEX panels, illustrating how schools manage sensitive information for permanent exclusion

Navigating the Redaction Divide: SAR or PEX?

Schools are increasingly required to manage sensitive information in ways that balance transparency, fairness, and data protection. One area that frequently creates confusion is the difference between redaction undertaken for a Subject Access Request (SAR) and redaction applied when preparing documentation for a Permanent Exclusion (PEX) Review Panel. The Redaction Guide for PEX Panels has been introduced to address this issue and provide clear, practical guidance for staff.

Read more …

  1. Leavers' Memorabilia
  2. Sharing photos on World Book Day: Privacy considerations
  3. Make sure DPE is your registered DPO with the ICO
  4. Supplier Due Diligence Step by Step: Are you sharing personal data with a third party organisation?
  5. Time to kick-start your Clear Desk and Screen policy?
  6. The DSL’s Guide to Filtering and Monitoring
  7. Are Governors the Frontline of Cyber Security? (February 12th is Governors Awareness Day)
  8. DPE Webinar Schedule
  9. The Danger of the 'Data Dump': Why more information isn't always better!
  10. Introducing our new Recording and Transcription Policy
  11. Parents and students covertly recording conversations
  12. New DfE AI Standards
  13. Shareable Snippet: Office Security Best Practices for the Holidays
  14. CCTV Policy update: retention
  15. Shareable Snippet: Confidential waste
  16. Sharing information to safeguard children and young people in the education sector in the UK
  17. Fraud awareness from the DfE
  18. Complaints vs. Data Rights: A Guide
  19. Data Breach: School sends out names and contact details in a spreadsheet.
  20. September 2025 Policy and Document Updates
  21. KCSIE 2025: Data Protection, AI, and Cyber Security
  22. The Online SCR Data Breach: What You Need to Know
  23. Back to School Basics for Data Protection and Cyber Security Compliance
  24. Building a Secure School: Using the ICO Accountability Framework to Meet DfE Digital Standards
  25. Why Physical and Data Security Must Go Hand-In-Hand
  26. Digital Safeguarding: DfE announces statutory DfE Digital Standards
  27. Safeguarding Smiles & Social Media!
  28. The Data Protection Lead/Champion Role
  29. Changes to the Academy Trust Handbook 2025
  30. Social Media Day 2025
  31. How Ofsted looks at AI during inspection and regulation
  32. Preschool Employment tribunal for the use of WhatsApp
  33. Data Breaches 2025 Report Highlights
  34. Not everyone needs access: The Key to Protecting Sensitive Data
  35. West Lothian Schools in Cyber Attack
  36. National Honesty Day: Transparency
  37. FOI Request - BBC News
  38. Social Media and Marketing Guidelines and Training
  39. New Governor Resources
  40. Does stress lead to more data breaches?
  41. Are teachers using AI? 83% say its a time-saver
  42. DfE Digital Standards - narrowing the digital divide
  43. Arbor AI - On By Default
  44. DfE Guidance: Choosing a new MIS
  45. HCRG Care Group data breach
  46. The Importance of AI literacy and training staff
  47. How to verify visitors the right way
  48. Short Guide to AI Video
  49. Safer Internet Day, Cyber Security & Data Protection
  50. The Cyber Resilience Championship
  51. The Multiple Dimensions of Supplier Due Diligence
  52. School shares sensitive pupil information as part of an FOI response
  53. AI (Artificial Intelligence) Best Practice Area & Policy
  54. Blacon High School Cyber Attack
  55. WhatsApp and FOI's: ICO Warnings
  56. New AI Guidance from the DfE
  57. What the proposed Government legislative proposal around cyber crime means
  58. ICO report on AI tools in recruitment
  59. DfE update to record keeping and management
  60. Update to data sharing for school immunisation programmes
  61. Early Years Settings and Cyber Security
  62. SLT Digital Lead Profile
  63. The role of governors in cyber security and data protection
  64. Navigating Privacy at the End of Term , Special Occasions and End of Year
  65. Contracts Register
  66. DfE Digital Standards Autumn Update
  67. The importance of knowing how to access your CCTV footage!
  68. Cyber Attack on a Special School
  69. Stealing children's data
  70. What is dark data? (and why does it matter?)
  71. Ofqual highlights the value of cyber security training in schools
  72. Searching for data when you receive a Subject Access Request
  73. Fylde Coast Academy Trust Cyber Attack This Week
  74. Calling all IT leads in schools and mult academy trusts!
  75. Ransomware cyber attack on a school in Bromley
  76. Join Our Social Media Family!
  77. School hit by Cyber Attack
  78. Cyber Security Best Practice Area
  79. DfE Digital Standards for Schools and Colleges Tracker
  80. New Policies, Documents, Letters and Posters page
  81. Schools and Trusts Best Practice Area
  82. The DPE Retention Schedule
  83. Making the Rounds Update (now includes reporting)
  84. ESFA Cyber Essentials Requirement for Colleges from 2024/2025
  85. ICO Reprimands a School
  86. Out of date technology
  87. Data Retention and the Pupil File
  88. Have you assigned your SLT Digital Lead yet?
  89. Getting Started with AI (Artificial Intelligence)
  90. Cyber attack on a school during half term
  91. The rise of cyber attacks in schools are causing pupils to miss classes
  92. ICO: Learning from the mistakes of others report
  93. Cyber attack on a Trust; the aftermath
  94. School Focus: The Vale Federation | Aylesbury
  95. DfE Dealing with Subject Access Requests (SARs) Guidance
  96. Update to the Guidance on Information Sharing from the DfE
  97. FOI Requests generated by Artificial Intelligence
  98. Social Media Best Practice Area
  99. Lettings Best Practice Area
  100. MFA Bombing - What is it?
  101. Protecting your Social Media Accounts
  102. Checklists - Are They Your Most Powerful Compliance Tool?
  103. Product Focus on Checklists : Initial Trust Plan
  104. Product Focus on Checklists : End of Term Checklist
  105. Product Focus on Checklists : Information and Cyber Security
  106. Product Focus on Checklists : Social Media
  107. Product Focus on Checklists : Lettings
  108. Product Focus on Checklists : Record of Processing
  109. Milk Island: The secret location that allows children to view restricted content on Google Maps
  110. Why Data Should Stay Put: Benefits of Keeping Data in Its Original System
  111. Product Focus on Checklists : Data Retention and Destruction
  112. Product Focus on Checklists : Data Migration
  113. Product Focus on Checklists : Biometrics
  114. Product Focus on Checklists : Supplier Due Diligence
  115. Free Cyber help, advice and training with the Cyber Resilience Centres
  116. The Perils of Paper: The Printing Vulnerability
  117. Product Focus on Checklists : FOI
  118. Product Focus on Checklists : Governors and Data
  119. Product Focus on Checklists : DPIA
  120. Product Focus on Checklists : Site Moves
  121. Product Focus on Checklists : Data Breaches
  122. Product Focus on Checklists : Subject Access Requests
  123. Product Focus on Checklists : Bring your own device
  124. Product Focus on Checklists : Working out of school/offsite
  125. Cyber Attack on a School
  126. Product Focus on Checklists : Redaction
  127. Why Due Diligence is Important: Fake apps
  128. Product Focus on Checklists : CCTV
  129. Product Focus on Checklists : Clear desk
  130. Product Focus on Checklists : Commitment to compliance
  131. Product Focus on Checklists : Photos and video
  132. Product Focus on Checklists : Passwords
  133. Product Focus on Checklists : Information Classification
  134. Free cyber training for staff
  135. DfE Digital Standards Update
  136. The Mother of all Breaches
  137. International Data Transfers (part 1): Navigating Cross-Border Data Transfers: Understanding EU SCCs, UK Addendum, and UK IDTA
  138. ClassCharts Possible Data Breach
  139. Where is your data stored?
  140. IAPP looks at AI privacy risks
  141. If you suspect a financial scam .....
  142. School Focus: St Bernadette's Catholic Primary School | Brighton
  143. Guardians of Privacy: 16. Social Media Checklist
  144. Guardians of Privacy: 15. Navigating Social Media in Educational Settings Summary
  145. Guardians of Privacy: 14. Social Media and Cyber Bullying
  146. Guardians of Privacy: 13. Social Media, Copyright and Intellectual Property
  147. Guardians of Privacy: 12. Social Media and Going Viral
  148. Guardians of Privacy: 11. Staff Social Media Accounts
  149. Guardians of Privacy: 10. Social Media and Cookies
  150. Guardians of Privacy: 9. Social Media and Morality
  151. New Resources for Schools from the ICO
  152. Guardians of Privacy: 8. Social Media Policies
  153. Guardians of Privacy: 7. Social Media Data Retention
  154. Guardians of Privacy: 6. Posting Safely
  155. Guardians of Privacy: 5. Social Media and Consent
  156. Guardians of Privacy: 4. Social Media Access Control
  157. Guardians of Privacy: 3. Social Media Channels
  158. Guardians of Privacy: 2. Law and Regulations
  159. Guardians of Privacy: 1. Social media, privacy and children
  160. The ICO reprimands a Multi Academy Trust
  161. Guidance for the use of school email and applying email retention in schools
  162. Data Protection Tips for Early Years Settings
  163. Children's Privacy around the world is a puzzle
  164. Trust Initial Plan Checklist Update
  165. Records Management Best Practice Update
  166. What do I need to redact?
  167. Trust Initial Plan for Data Protection Compliance (for Multi Academy Trusts)
  168. Google for Education Resources: Helping IT Admins meet DfE digital and technology standards
  169. Lettings Best Practice and Guidance
  170. Considerations when migrating to a new MIS
  171. Public bodies and sensitive data
  172. Get a DPE Badge for your website!
  173. ICO: 10 Step guide to sharing information to safeguard children
  174. Help after a Cyber Attack/Incident
  175. Data Protection and Cyber Security (Inset Day) Training Ideas
  176. How KCSIE is linked to Cyber Strategy
  177. Handling Freedom of Information Requests the right way
  178. Where's Harry the Hacker?
  179. The ICO Reprimands a school
  180. Redaction Guidelines Updated
  181. Using WhatsApp in Schools
  182. How to contact us for support, subject access requests, data breaches and FOI's
  183. FOI: Reinforced Autoclaved Aerated Concrete
  184. FOI: Henry Jackson Society
  185. FOI: Vaccination Justifications
  186. How the Record of Processing Can Help You
  187. What does a Data Protection Officer Do?
  188. Carrying out Supplier Due Diligence
  189. How Long Should You Keep Personal Data For?
  190. B&H FoI: Racist/religious incidents/bullying
  191. Protocol for Setting Up and Delivery of Online Teaching and Learning
  192. Class Dojo International Data Sharing
  193. Model Publication Scheme: Amendments, Improvements and Updates
  194. Transparency
  195. Research projects and GDPR
  196. Secure file transfer of files using Royal Mail
  197. Emergency contacts and consent
  198. Key elements of a successful DPIA
  199. FOI Publication Schemes
  200. Best Practice for Managing Photos and Video
  201. New Drip Feeds: Recognise and Respond to Subject Access Request
  202. When to contact the Data Protection Officer?
  203. National child measurement programme
  204. Headteacher fined for breach of data protection legislation
  205. Acceptable Use Policy

Search