The time following a cyber attack can be very stressful, and in the heat of the moment it can be difficult to know what the best thing to do between working out what went wrong, how to recover and what went missing, it can be hard to know where to start first.

We provide some help and guidance in our Information and Cyber Security Best Practice Area, which also includes the checklist:  document What to do immediately after a Cyber Attack(58 KB) .

Are you looking for some data protection training for your inset day(s) at the start of term?  Here are some ideas about how to raise awareness around data protection and cyber security for your staff. 

The training should be relevant, accurate and up to date. 

The DfE recently published an update to the Keeping Children Safe in Education Document 2025.  The document has a strong emphasis on making sure everyone is aware of the online dangers of using the internet and makes recommendations about how schools and colleges should put processes in place to keep children safe online. 

The Information Commissioner's Office have recently put Leicester City Council forward as an FOI (Freedom of Information) best practice example. An FOI refers to a request under the Freedom of Information Act. The Act allows any individual or organisation to make a request to a public authority for information they have recorded. 

Here's a little fun. It's our not-so-good friend Harry the Hacker. He's all over the place...can you find him?

A reprimand has been issued by the ICO to Parkside Community Primary School in relation to the infringements of Article 5 (1)(f), Article 24 (1) and Article 32 of the UK GDPR. This article discusses the reprimand and looks and what schools can do to avoid this type of breach.

Some of the information in the reprimand document is redacted, but the main details are:
A safeguarding email was shared in the classroom via the electronic whiteboard. The ICO has found that the school

We've updated our document redaction guidelines to include more information on the techniques available as well as exemptions.

https://dataprotection.education/best-practice-library/best-practice/redaction

This article is about the use of WhatsApp as a communication tool in schools and recent vulnerabilities. It discusses school staff using WhatsApp as a communication method for school business.

We are sometimes asked by staff whether it is OK for staff to be in a WhatsApp group for important school messages. Staff often wish to use it because it is an easy way to communicate and a platform that a lot of people are familiar with.  It is also free. There are issues around this:

This article lists the ways that Data Protection Education can be contacted for general data protection queries, data breaches, subject access requests and freedom of information requests.

While all our customers have a dedicated consultant who can be contact directly, if there is an urgent issue we would always advise emailing This email address is being protected from spambots. You need JavaScript enabled to view it..

When you email This email address is being protected from

You may have received this FOI request from ITV News:

(scroll down for our advice)

I am writing to you under the Freedom of Information Act 2000 to request information about any use of Reinforced Autoclaved Aerated Concrete (RAAC) in your school. The questions are outlined in the table below...

This FOI request is doing the rounds:  

My name is Charlotte Littlewood, and I am a Research Fellow at the Henry Jackson Society.

I am writing to you under the Freedom of Information Act 2000 to request the following information:

Do you have any current pupils of South Asian descent? (Yes/No) 

You may have received an email or letter requesting information on the research and justification of the administration of vaccines, such as:

Dear Sir/Madam,
RE: SCHOOL VACCINE POLICY.

In relation to UK Government COVID-19 'Vaccine' Policy and Childhood Immunization ‘Vaccine’ Policy which includes INFLUENZA, HPV, MEASLES AND POLIO, under the protection of the People's Union of Britain, you are hereby served notice of conditional acceptance that yo