Data Protection Services

  • Are you concerned about safeguarding staff, pupil and parent data?

  • Can you respond to breaches quickly and effectively?

  • Are Subject Access Requests a burden?

  • Are you worried about fines, legal action and claims?

Our Data Protection specialists are here to help!
Data Protection 1
Data Protection 2


Data Protection 3 Data Protection Officer (DPO) as a Service

Our DPO as a Service package offers complete piece of mind. Offering access to a team of specialist Data Protection Officers, experts in the education sector who will provide hands on support and guidance on compliance.

This service includes:

  • access to our Helpline
  • advice on Subject Access Requests and Privacy Impact Assessments
  • access to our GDPR Toolkit of policies and templates
  • GDPR Compliance Review
  • full Staff Training in the first year
  • liaison with the ICO and Data Subjects
Data Protection 4 GDPR Compliance Audit

Our comprehensive GDPR Compliance Review assesses your school’s procedures, systems, records and activities in order to:

  • ensure that appropriate policies and procedures are in place.
  • verify those policies and procedures are being followed
  • test the adequacy of policies and procedures in place
  • recommend any adjustments that need to be made in policy and procedures.

We will focus on the key compliance areas of:

  • HR and Codes of Conduct
  • IT and Data Security
  • Governance
  • Data Maps
  • Data disposal
  • Suppliers & Data Sharing
  • Subject Requests and Data breaches
  • Visits, trips and consent
  • Site and physical controls

Upon completion of the audit you will receive an executive summary which will highlight areas of compliance with the DPA 2018 and UK GDPR and areas where work needs to be undertaken to become compliant. The report includes a prioritised action plan, detailing the areas requiring attention and recommendations for remediation.

Data Protection 5 GDPR Helpline

Our helpline service is suitable for schools with an in – house DPO and offers practical advice, support and guidance on becoming – and remaining – compliant with the requirements of GDPR and data protection legislation. The service also includes access to our GDPR Toolkit of policies and templates.

Data Protection 6 GDPR(iS) Compliance Management Platform

The GDPRiS compliance management platform is an online portal for schools to manage all areas of data protection compliance. Our Data Protection Officers use GDPRiS to deliver our Data Protection Offcer service because it is designed specifically to meet the needs of education settings when managing data protection. GDPRiS provides a whole-setting approach to data protection, simplifies processes and provides evidence-based accountability.

Key features include:

  • Comprehensive supplier data mapping tools
  • Data breach recording / reporting
  • Subject Access Request recording / reporting
  • Training and policy document storage
  • Self-assessment questionnaires for staff
  • Compliance audit trails

The GDPRiS platform is available to purchase from us at preferential rates, whether or not you subscribe to our other services.

Data Protection 7 Subject Access Request Support (SARs)

Subject Access Requests are becoming increasingly common and it is vital that you are prepared to respond properly. Our SAR support service provides advice and guidance in the management of a Subject Access Request. We can also support with:

  • advice on auditing and locating records
  • redaction
  • liaison with requestors and partner agencies (including local authority teams such as Children’s Services, Human Resources, SEND)
  • liaison with the Information Commissioner’s Office (ICO)


Data Protection Policy Suite

Our GDPR Toolkit is a comprehensive Data Protection Framework Policy Suite, written by solicitors alongside our expert team of education data specialists and is bespoke to the unique needs of schools and academies.

(We also have a framework suitable for Multi Academy Trusts. Please get in touch to discuss your requirements.)

It includes:

  • Data Protection Policy
    • Annex 1: Legal Conditions for Processing
    • Annex 2: Breach Procedure
    • Annex 3: Data Protection Impact Assessment Procedure
    • Annex 4: Subject Access Request Procedure
    • Annex 5: Freedom of Information Request Procedure
  • Privacy Notice (Pupils)
  • Privacy Notice (Workforce)
  • Retention Schedule
  • Social Media Policy
  • Bring Your Own Device (BYOD) Policy
  • ICT Acceptable Use Policy
  • Off Site Working Policy
  • CCTV Policy
  • Privacy Notice (Governors)
  • Special Category Data Policy
  • Protection of Biometric Information Policy
  • Remote Learning Policy

For help in understanding how to adopt these policies, purchasers can attend our Contextualising Policies Data Protection Bitesize training course.

To purchase the Policy Suite or discuss your needs with us in more detail, click here.

Data Protection Impact Assessments (DPIAs)

We have a wide range of Data Protection Impact Assessment (DPIA) templates, covering the full range of situations and suppliers that may require one.

Our team can offer you advice and guidance in assessing the need for a DPIA, and in completing the DPIA templates to account for your unique circumstances.

If you would like advice or assistance with a DPIA, or would like to purchase one of our templates, please use the button below to get in touch.

Data Protection 8


Data Protection for all staff
This two hour staff / governor training provides the staff training required by s71(2)(c) of the Data Protection Act 2018.
Data Protection for Governors
A look at the strategic role Governors play in embedding a compliance culture.
Data Protection for Senior Leaders
A practical guide to implementing and embedding a culture of compliance in your school.
Data Protection Bitesize Training Suite
All the essential information your school needs to become compliant.
Data Protection 9

Any questions?

The Education Data Hub team would love to hear from you.

Get in touch with your questions, for a quote, or just for a chat!

Copyright © Education Data Hub
Powered By Spotlight Studios

A Service by Derbyshire County Council