Earlier this year, we brought together schools and multi academy trusts from across the sector for a day focused on something that continues to challenge us all:  data protection in education.

The response was incredible.

Read more …

📢 Thinking about your training for inset days in September? Then look no further and book onto our online training sessions.

Read more …

Join us for our latest podcast episode breaking down the key changes introduced by the UK's new Data (Use and Access) Act (DUAA), explaining its phased rollout and objectives.  The DUAA becomes law on Thursday 5th February 2026.

Read more …

Following the Kido nursery breach we've previously published information about, one of our consultants was invited to be guest on the Small Business Cyber Security Guy's podcast.

Read more …

This podcast episode delves into the often-overlooked but crucial topic of records management within the school environment. It breaks down the lifecycle of a record from creation to disposal, highlighting the legal framework schools operate within, including the Data Protection Act 2018, UK GDPR, and the Freedom of Information Act 2000. The episode also explores the consequences of non-compliance, the importance of a robust Records Management Policy, and the specific considerations for handling sensitive data like safeguarding records. Ultimately, it emphasizes that effective records management is a whole-school responsibility that protects students, staff, and the school itself.

Key Takeaways

• Records management is a systematic process encompassing the entire lifecycle of information, from creation and maintenance to retention and disposal.
• A formal, written Records Management Policy and a detailed retention schedule are essential for ensuring compliance and efficient operations.
• All school employees, from the headteacher to external contractors, are responsible for adhering to the Records Management Policy.
• Special category data, such as health and safeguarding records, requires enhanced protection, including stricter access controls and longer retention periods.
• Effective records management is not just about compliance; it's about fostering a culture of good information governance within the school.

Suggested Actions

1. Develop or review your school's Records Management Policy, ensuring it clearly defines roles, responsibilities, and procedures for handling different types of records.
2. Create a detailed retention schedule that specifies how long each type of record must be kept, in accordance with legal requirements and best practices.
3. Implement a system for classifying data (e.g., Confidential, Public, Internal) to ensure the appropriate level of security and access control.

Join us for our first DPE podcast! Data Protection Training for School Staff

This podcast episode provides an overview of the Data Protection Education's 2024 training update, focusing on the legal framework and practical guidance for data protection in the workplace. The discussion covers key definitions like UK GDPR, Data Controller, Data Processor, Personal Data, and Data Protection Officer. It also highlights the importance of data protection in preventing breaches and fostering a strong data protection culture within organisations, using scenarios and examples to illustrate practical applications and potential risks.

Key Takeaways

• Understanding the UK GDPR and the Data Protection Act 2018 is crucial for compliance in the UK.
• Recognising 'personal data' and 'special category data' is fundamental to protecting individuals' information.
• Data protection is not solely an IT issue; it's everyone's responsibility within an organisation.
• Practical scenarios and role-playing can effectively illustrate data protection principles in action.
• 'Harry the Hacker' concept highlights that data breaches can occur through simple oversights and physical security lapses, not just cyberattacks.

This content was produced using Podfeed AI.