Adapted from: The Irish Data Protection Commissioner
The UK GDPR does not prescribe the exact process for carrying out a DPIA beyond the minimum features outlined above, allowing for flexibility and scalability in line with your organisation’s needs. Although there is no one prescribed approach to take, the following steps can guide you through the process:
We have added publication scheme model templates in the FOI Best Practice area for academies as well as maintained schools.
Difference between the High Level and Detailed Publication Scheme
The Government has provided some guidance on the avoidance of disinformation online.
https://sharechecklist.gov.uk/
What is disinformation?
Disinformation is the deliberate creation or dissemination of false and/or manipulated information
In light of recent ICO reprimands to schools it is important schools remember best practice for managing photos. The formal legal warnings issued by the ICO recently to schools both related to the processing of photos where no consent had been given.
We've just published two new drip-feeds for printing off a circulating to staff on recognising and responding to subject access requests.
The Data Protection Officer (DPO) can provide support in many areas but are you aware of what we do help with?
There are some more well-known areas of data protection that we would be called upon to advise such as subject access requests and breaches but DPO’s don’t only provide advice and support when things go wrong,
Updated operational guidance has been produced by Public Health England for local commissioners and schools on running the national child measurement programme (NCMP)
We've released version 1 of the Compliance Manager tool.
What is it?
The Compliance Manager allows you to assign any document to staff and enable the following interactions
or
Any standard document type can be uploaded and interactions selected. Then select the users to assign the document too and a date by which the users should have responded.
From the Information Commissioner's Office blog:
A former headteacher has been fined in court for unlawfully obtaining school children’s personal data from previous schools where he worked.
By changing the culture of email use within an organisation will not only benefit the organisation towards GDPR compliance and beyond, it will also save a significant amount of time by reducing staff workload and hopefully support staff wellbeing too.
©2026 Data Protection Education Ltd.