Data Protection Toolkit

The Department for Education (DfE) has updated its Data Protection Toolkit.

The toolkit covers policies and processes schools and multi-academy trusts need to protect personal data and respond effectively to a personal data breach. The expanded toolkit will help school staff, governors and trustees:

• Understand how to comply with data protection law
• Develop their data policies and processes
• Know what staff and pupil data to keep
• Follow good practices for preventing personal data breaches.

The responsibility for data protection and accountability for compliance sits with governors and trustees. Schools and multi-academy trusts risk getting a fine if they don’t comply. Governors and trustees should check that the school:

• Monitors their data protection performance
• Supports the data protection officer
• Has good network security infrastructure to keep personal data protected
• Has a business continuity plan in place that includes cyber security.