DPO Training for schools alongside an outsourced DPO role.

Our Schools DPO provider acts as DPO and provides DPO training and services for over 1400 schools. Currently handling over 100 subject access requests per week and over a dozen reportable breaches per day.

Ask for a quote for a dedicated outsourced DPO and DPO training for your school, cluster of schools, Academy or MAT.

We only provide DPO services and training for schools ensuring you have the most relevant and up to date support available tailored for the education sector.

Included with our DPO service is workshop and on-line DPO training for school staff

Choosing a Data Protection Officer for your school - your DPO.

​A 2019 review of School DPO's showed that over half are not likely to be compliant. 


e.g. they MUST....

  1. be independent. i.e. not at risk of a conflict of interest. That potentially rules out; The Head, The Business Manager, Governors or Trustees, IT Managers or, in a MAT, the CEO / FD / COO

  2. have 'sufficient expertise' (what sufficient expertise means in reality is difficult to assess but, for schools, the level and sensitivity of data it collects and holds would suggest that the 'expertise' the DPO needs should be pretty thorough).

They need to be:

  •         Keeping the school(s) up to date with their data obligations now and in the future

  •         Monitoring compliance with the law as well as school policies

  •         Cooperating with the Information Commissioner's Office (ICO)

  •         Managing Subject Access Requests (SARs) within the required timescales 

  •         Advising on and reporting data breaches to the ICO within 72 hours

  •         Keeping up to date with GDPR developments and training staff accordingly


Our DPO service provider covers:

  • An annual Audit of data processes - In addition to providing regular updates, you will receive an annual audit to provide an assessment of whether the school or MAT is following good data protection practice. The audit will look at whether you are following your policies and procedures and make recommendations for improvements including any new guidance from the Information Commissioner's Office (ICO).

  • Training for school employees – you will be offered training for the school's employees on compliance with GDPR and other data protection laws. Training will be given in two workshops and online with our eLearning platform

  • Providing advice and guidance when required - you will be appointed a designated consultant to manage the school's account. He or she will be an expert in this area and inform and advise the school or MAT, and their employees about the obligations that are required to comply with the GDPR and other data protection laws. This will be done by way of reports, information sheets and training. Telephone and email advice is also available for school or MAT leaders.

  • Creating and Maintaining data records – assisting the school to create and maintain comprehensive records of all the data processing activities carried out, including the purpose of all activities, which must be made public upon request.

  • Drafting Data policies and procedures - assisting the school to devise and maintain policies and procedures to regulate your processing of personal data and set out how to interact with external bodies, regulatory authorities, data subjects and information seekers.

  • Acting as the first point of contact with authorities - We will be the first point of contact for supervisory authorities and for individuals whose data is processed.

  • Managing Subject Access Requests and those under Freedom of Information Act - We will manage enquiries under data protection and freedom of information laws, in that we will manage the data collection process, as carried out by the school's employees under our direction, and draft the various correspondences with the data subjects and regulatory authorities.