Free Documents
Access essential guides and visual aids to enhance records management across your organisation.
Data Protection Education is pleased to issue this set of free documents. The documents are to provide best practice guidance around data protection and cyber security.
We would love to hear from you about how you use them in your organisation. Please send us your ideas for improvements, adaptations or new topics.
We don't require your information or registration to access these resources.
Keep in touch
AI
Understand the risks of using AI, the different types of AI and when to conduct a DPIA.

AI DPIA Drip Feed
Understanding the different types of AI, when a DPIA is required and using personal data.
Data Request Types
Understand the different types of requests an organisation can receive and when to respond and how to share data safely and securely.

Data Request Type Drip Feed
A simple table showing the differences between:
A Subject Access Request
An Education Record Request
A Freedom of Information Request
DfE Digital Standards
Understand the DfE Digital Standards with extra resources created by Data Protection Education.

DfE Digital Standards Overview
An overview showing a graphical map of all of the DfE Digital Standards and the standards below them all on one page.
Records Management Toolkit: Digital Downloads
Access guides and visual aids to enhance compliance across your organisation.
Use the Data Protection and Records Management Handbook alongside the Records Mangement Quick Reference Sheet and our end of day 3-Minute Data Sweep. Use them as a complete pack to work through the handbook and implement school-wide improvements.

3 Minute Data Sweep
For All Staff: The Daily Finish
Daily checks to keep data safe for classroom practitioners.
Refer to the S.W.E.E.P (3-Minute Data Sweep) poster before you leave. These are ideal for classrooms and individual offices as a quick "before you leave" checklist to secure your workspace.
Sharing Pupil Allergy Information Safely: Digital Downloads
Access guides and visual aids to enhance compliance across your organisation.
- Displaying pupil medical information on the staffroom wall can result in a data breach or oversharing of private information.
Withholding it out of fear of GDPR is a safeguarding risk.
Schools are stuck between the two, and with Benedict's Law taking effect this September, it becomes more of a conflict between the two.
So today, together with Anaphylaxis UK, we've published free practical guidance on sharing pupil allergy information safely.
It introduces the SSCIP: the Secure Safe Care Information Point: a designated, controlled space for allergy and medical information, replacing the scatter-gun displays across staffrooms, corridors and classrooms.
Inside the guide:
- A role-based sharing matrix: exactly what catering staff, supply teachers, lunchtime supervisors and paramedics should receive, and on what lawful basis
- Myth-busting on consent: parental consent is NOT the legal basis for processing pupil health data
- Emergency grab bags and trips/visits packs: keeping data accurate wherever it goes

Sharing Pupil Allergy Data Safely
Co-published by Data Protection Education and Anaphylaxis UK, this 3-page guidance document helps schools safely manage pupil medical and allergy data under UK GDPR. It introduces the Secure Safe Care Information Point (SSCIP) framework to replace unsecure staffroom displays, outlines a role-based data sharing matrix, and provides compliance standards for Emergency Grab Bags and off-site trip packs. Essential reading for Headteachers, SENCOs, DPOs, and Safeguarding Leads ahead of the new academic year.
Contact us today with any questions or for a
Free Consultation
Call us with any questions
0800 0862018
or email us on
info@dataprotection.education




















