🚨 Pupils' sensitive data was shared 'by mistake' by Wellsway School in response to an FOI. 🚨
Best Practice Update
📢🤖📢 We are pleased to announce our AI Best Practice Area & AI Template Policy
🏴☠️ 📢 A school is closed today and tomorrow as the result of a ransomware cyber attack.
📲💬 We come across many organisations using WhatsApp as a communication tool with staff regularly and have previously highlighted some of the risks. The ICO have recently published information about a case where WhatsApp messages had to be included in a Freedom of Information Request.
📢📢 The DfE has recently published new guidance and resources about using Artificial Intelligence in a school environment.
🛡️🖥️ Today the Government launched a consultation period about introducing legislation to counter ransomware.
📢📢 Data Protection Education are running a new webinar schedule for 2025!
🤖🤖 The ICO recently published an overview reports about the use of AI tools in recruitment processes. While it was recognised that it can offer benefits to employers, it recognises their use can also lead to risks for people and their privacy and information rights.
📂 📄 The DfE issued an update to data sharing and record keeping and management in December.
In December (2024) there was an update to data sharing guidance for school immunisation programmes.
🧸 🚼 As digital technology continues to increase in our educational settings, Early Years settings are increasingly integrating digital tools into their operations. While this might enhance efficiency and communication, it also raises concerns and challenges about cyber security and data protection.
👩🏽🏫👨🏽💻 Since we have been talking to schools and multi academy trusts about the SLT digital lead, there have been a lot of questions about who that should be in the organisation. There’s often an assumption that it should automatically be the IT Manager, technician, or Data Protection Lead. In this article, we explore the profile of an effective SLT Digital Lead and their critical role in shaping digital strategy, integrating technology into teaching and learning,
- The role of governors in cyber security and data protection
- Navigating Privacy at the End of Term , Special Occasions and End of Year
- Contracts Register
- DfE Digital Standards Autumn Update
- The importance of knowing how to access your CCTV footage!
- Cyber Attack on a Special School
- Stealing children's data
- What is dark data? (and why does it matter?)
- Ofqual highlights the value of cyber security training in schools
- Searching for data when you receive a Subject Access Request
- Fylde Coast Academy Trust Cyber Attack This Week
- Calling all IT leads in schools and mult academy trusts!
- Ransomware cyber attack on a school in Bromley
- The Data Protection Lead/Champion Role
- Join Our Social Media Family!
- School hit by Cyber Attack
- New Academic Year Kick-Off!
- Cyber Security Best Practice Area
- DfE Digital Standards for Schools and Colleges Tracker
- New Policies, Documents, Letters and Posters page
- Schools and Trusts Best Practice Area
- The DPE Retention Schedule
- Making the Rounds Update (now includes reporting)
- ESFA Cyber Essentials Requirement for Colleges from 2024/2025
- ICO Reprimands a School
- Navigating Privacy at the End of Term , Special Occasions and End of Year
- Out of date technology
- Data Retention and the Pupil File
- Have you assigned your SLT Digital Lead yet?
- Getting Started with AI (Artificial Intelligence)
- Cyber attack on a school during half term
- Update to the DfE Digital Cyber Security Standards for Schools and Colleges (May 2024)
- The rise of cyber attacks in schools are causing pupils to miss classes
- ICO: Learning from the mistakes of others report
- Cyber attack on a Trust; the aftermath
- School Focus: The Vale Federation | Aylesbury
- DfE Dealing with Subject Access Requests (SARs) Guidance
- Update to the Guidance on Information Sharing from the DfE
- FOI Requests generated by Artificial Intelligence
- Social Media Best Practice Area
- Lettings Best Practice Area
- Appropriate filtering and monitoring definitions
- MFA Bombing - What is it?
- Protecting your Social Media Accounts
- Why we recommend using checklists
- Product Focus on Checklists : Initial Trust Plan
- Product Focus on Checklists : End of Term Checklist
- Product Focus on Checklists : Information and Cyber Security
- Product Focus on Checklists : Social Media
- Product Focus on Checklists : Lettings
- Product Focus on Checklists : Record of Processing
- Milk Island: The secret location that allows children to view restricted content on Google Maps
- Why Data Should Stay Put: Benefits of Keeping Data in Its Original System
- Product Focus on Checklists : Data Retention and Destruction
- Product Focus on Checklists : Data Migration
- Product Focus on Checklists : Biometrics
- Product Focus on Checklists : Supplier Due Diligence
- Free Cyber help, advice and training with the Cyber Resilience Centres
- The Perils of Paper: The Printing Vulnerability
- Product Focus on Checklists : FOI
- Product Focus on Checklists : Governors and Data
- Product Focus on Checklists : DPIA
- Product Focus on Checklists : Site Moves
- Product Focus on Checklists : Data Breaches
- Product Focus on Checklists : Subject Access Requests
- Product Focus on Checklists : Bring your own device
- Product Focus on Checklists : Working out of school/offsite
- Cyber Attack on a School
- Product Focus on Checklists : Redaction
- Why Due Diligence is Important: Fake apps
- Product Focus on Checklists : CCTV
- Product Focus on Checklists : Clear desk
- Product Focus on Checklists : Commitment to compliance
- Product Focus on Checklists : Photos and video
- Product Focus on Checklists : Passwords
- Product Focus on Checklists : Information Classification
- Free cyber training for staff
- DfE Digital Standards Update
- The Mother of all Breaches
- International Data Transfers (part 1): Navigating Cross-Border Data Transfers: Understanding EU SCCs, UK Addendum, and UK IDTA
- ClassCharts Possible Data Breach
- Where is your data stored?
- IAPP looks at AI privacy risks
- If you suspect a financial scam .....
- School Focus: St Bernadette's Catholic Primary School | Brighton
- Guardians of Privacy: 16. Social Media Checklist
- Guardians of Privacy: 15. Navigating Social Media in Educational Settings Summary
- Guardians of Privacy: 14. Social Media and Cyber Bullying
- Guardians of Privacy: 13. Social Media, Copyright and Intellectual Property
- Guardians of Privacy: 12. Social Media and Going Viral
- Guardians of Privacy: 11. Staff Social Media Accounts
- Guardians of Privacy: 10. Social Media and Cookies
- Guardians of Privacy: 9. Social Media and Morality
- New Resources for Schools from the ICO
- Guardians of Privacy: 8. Social Media Policies
- Guardians of Privacy: 7. Social Media Data Retention
- Guardians of Privacy: 6. Posting Safely
- Guardians of Privacy: 5. Social Media and Consent
- Guardians of Privacy: 4. Social Media Access Control
- Guardians of Privacy: 3. Social Media Channels
- Guardians of Privacy: 2. Law and Regulations
- Guardians of Privacy: 1. Social media, privacy and children
- The ICO reprimands a Multi Academy Trust
- KCSIE: Filtering, Monitoring and Privacy
- Guidance for the use of school email and applying email retention in schools
- Data Protection Tips for Early Years Settings
- Children's Privacy around the world is a puzzle
- Trust Initial Plan Checklist Update
- Records Management Best Practice Update
- Governors and Data Best Practice Area Update
- What do I need to redact?
- Trust Initial Plan for Data Protection Compliance (for Multi Academy Trusts)
- Google for Education Resources: Helping IT Admins meet DfE digital and technology standards
- Lettings Best Practice and Guidance
- Considerations when migrating to a new MIS
- Public bodies and sensitive data
- Get a DPE Badge for your website!
- ICO: 10 Step guide to sharing information to safeguard children
- Help after a Cyber Attack/Incident
- Data Protection and Cyber Security (Inset Day) Training Ideas
- How KCSIE is linked to Cyber Strategy
- Handling Freedom of Information Requests the right way
- Where's Harry the Hacker?
- The ICO Reprimands a school
- Subject Access Requests (SARs)
- Redaction Guidelines Updated
- Using WhatsApp in Schools
- How to contact us for support, subject access requests, data breaches and FOI's
- FOI: Reinforced Autoclaved Aerated Concrete
- FOI: Henry Jackson Society
- FOI: Vaccination Justifications
- How the Record of Processing Can Help You
- What does a Data Protection Officer Do?
- Blog: Best Practice on the Retention of Child Protection Information
- Carrying out Supplier Due Diligence
- Email and retention periods
- How Long Should You Keep Personal Data For?
- Sharing this year’s Nativity play online
- B&H FoI: Racist/religious incidents/bullying
- Protocol for Setting Up and Delivery of Online Teaching and Learning
- Class Dojo International Data Sharing
- Model Publication Scheme: Amendments, Improvements and Updates
- Transparency
- Parents and students covertly recording conversations
- SAR? ER? FOI?
- Research projects and GDPR
- Secure file transfer of files using Royal Mail
- Emergency contacts and consent
- Key elements of a successful DPIA
- FOI Publication Schemes
- Best Practice for Managing Photos and Video
- New Drip Feeds: Recognise and Respond to Subject Access Request
- When to contact the Data Protection Officer?
- National child measurement programme
- Make sure DPE is your registered DPO with the ICO
- Headteacher fined for breach of data protection legislation
©2025 Data Protection Education Ltd.