As we approach the final week of term, we are aware that we have a significant number of redaction projects currently in progress.
Our team is working hard to ensure that as many matters as possible are completed and returned before the end of term. However, we would like to remind customers that redaction is a manual process requiring careful review and attention to detail. It cannot be rushed without risking accuracy.
REPRIMAND
Article 5(1)(f) and Article 32(1)(b)
Technical and Organisational Measures
Decision to issue a reprimand
Taking into account all the circumstances of this case, including the aggravating factors and remedial steps, the Commissioner has decided to issue a reprimand to North Pole Enterprises in relation to the alleged infringements of Article 5(1)(f) and Article 32(1) of the UK GDPR set out above.
Please provide a written response outlining the steps you intend to take to rectify these concerns by no later than January 15, 2024. Failure to do so will leave us with no choice but to escalate this matter and consider further enforcement actions.
We wish you a Merry Christmas and a GDPR-compliant New Year.
Yours sincerely,
D. P. Adi-Humbug
Chief Information Commissioner
Information Commissioner's Office North Pole Division
Microsoft has recently announced the planned retirement of the Microsoft A1 Licenses for Education. According to Program Updates in Microsoft 365 for Education page the main reason is to limit storage. Free, unlimited storage plans have become prohibitive and have become a large vector for security risks and fraud.
On July 18, 2022, the U.K. government introduced the Data Protection and Digital Information Bill to Parliament. Previously known as the Data Reform Bill, it is the result of a consultation from 2021 and its aim is to update and simplify the U.K.’s data protection framework. According to the U.K. government, the new legal framework created by the DPDI Bill will reduce burdens on organizations while maintaining high data protection standards.
The headteacher of a grammar school has left her role after sending parents a list of the teachers going on strike.
The Headteacher at King Edward VI Five Ways Grammar school in Birmingham had been headmistress for just 18 months when an email she sent to parents is alleged to have named some teachers who would be striking during the planned walkouts last month.
A number of schools have received the below email from a company called IPR Protection. It is a scam and should be ignored.
Further information can be found here: https://www.aptma.ie/news-and-events/beware-of-scam-emails
It may be advisable to ask your IT department to block any emails from
This article is a reminder that Microsoft will stop support for both Windows Server 2012 and Windows Server 2012 R2 after October 10th 2023. Keeping software up to date on devices is best practice to help prevent cyber attacks and data breaches.
In 2023, YouTube faced the first complaint brought under the ICO's Children's Code, accused of collecting children's data without the protections the code requires. This article looks back at that complaint, explains what the Children's Code is, and sets out how the rules protecting children's data online have changed since.
Recently there has been an annual study published by Ponemon Institute (sponsored by Experian) entitled “Is Your Company Ready for a Big Data Breach?”. The study looks at the state of breach preparedness across organisations over a period of a year,
With biometric technology becoming more and more prevalent in society, the governance of the personal data that organisations collect from using this technology has recently been a topic of discussion.
The Children’s Code
The first update from the ICO is that the transition year for the introduction of The Children’s Code (also known as The Age Appropriate Design Code) has passed, with the code having come into effect on September 2nd.
©2026 Data Protection Education Ltd.