Data protection

Whether you are storing staff or pupil data, or answering requests for information on the data you hold, you must do it lawfully. Ensure data management and processing is compliant with data protection law with the resources below.

  • Freedom of information requests
    The Freedom of Information Act allows anyone to request information without giving a reason. Download the template to explain how FOI requests are handled in your setting
  • Data protection model policy
    All schools are required to have a policy on data protection. Use our data protection model policy to tailor a document that meets the needs of your setting
  • Single central record of recruitment and vetting checks
    Schools can use this template to ensure their single central record (SCR) is up-to-date and efficient
  • DPO skills audit
    Download and adapt the skills audit for data protection officers to ensure your setting is compliant with the GDPR
  • How do you respond to a subject access request?
    Under the GDPR you are required to explain your legal grounds when answering a SAR. Lisa Griffin describes what is involved in receiving a right to access request
  • Six ways to reduce a SAR workload
    Responding to a subject access request can be time, energy and resource consuming. We have six ways to help ease the burden
  • Strategies for introducing an email management process
    Many DPOs face resistance when introducing a new email retention and destruction process. Julia Sandford-Cooke suggests strategies for overcoming colleagues’ reluctance to delete their emails
  • Records retention and disposal policy
    The retention and destruction of records is subject to various statutory requirements. Download the template to state how your school or setting keeps and destroys different types of records
  • Carrying out a data protection audit
    Conducting a data compliance check or learning walk can seem a daunting prospect for data protection officers. Dai Durbridge shares his top tips
  • Record keeping for child protection files
    Good record keeping is essential to keep files secure, up to date and to protect pupils. Follow this best practice for keeping, storing and destroying safeguarding files

Pages