UK GDPR in Schools – Data Protection Officer Services for Education
This can be anyone who has no strategic or operational decision-making role with regards to data and data systems in your school. It doesn’t have to be a member of your own staff.
Examples of roles that are likely to not be able to be your DPO include the Headteacher, School Business Manager, Data Manager, IT Manager and most other senior leadership roles.
As an education provider, you have a responsibility to protect your students, staff and school. However, the responsibility isn’t just with protecting the physical form – it also comes down to the protection of any information or data you hold about said individuals and how it’s managed and controlled within your environment.
SchoolPro TLC provides the role of Data Protection Officer (DPO) as a service for schools to demonstrate an enhanced level of data protection compliance to the Information Commissioner’s Office. Our DPO Service is intended to assist schools and multi-academy trusts (MATs) in complying with the requirement to appointment such a role with the responsibilities set out in the Data Protection Act 2018.
Our staff are experienced school leaders so understand the data flows and need for data in different areas of the school. Our support as DPO includes a free online recording and reporting system for all relevant GDPR information, so you don’t have to pay additionally for another expensive system.
We also provide a great deal of functions compared to some other purchased services, including completed Data Privacy Impact Assessments and compliance checking of supplier data privacy agreements.
Data Protection Officer Service for Schools
Access to high-levels of expertise and banks of resources. It also gives you an impartial view of your systems, processes and practice. In the event of a data protection incident, impact on the day-to-day running of the school will be minimal as school staff can continue to carry out their roles. It is likely that this will also be a more cost effective approach than using an existing member of staff when compared to additional non-contact time, training and, possibly, a TLR. The support is also available outside normal school working hours and during the school holidays.
Our DPO service is cost-neutral compared to other, alternative solutions. For a school to appoint their own DPO, they will need to fund training for that individual and give them time to complete the role effectively. They will possibly also need to provide a financial incentive (such as a TLR) to them. Our experience and knowledge base (as well as economies of scale due to working with hundreds of schools) allow us to dramatically cut down these costs as well.
For example, a school senior leader earning £50k p.a. who is given an hour a week across the year to complete their DPO work is costing a school at least £2k which is more than our most expensive rate.
Subject access request guidance for schools, colleges and MATs. Frequently asked data protection questions about SARs answered here. Read on...
One of our DPOs will carry out audits to provide an assessment of whether you and your school are following good data protection practice. The audits will look at whether they are following your policies and procedures and make recommendations for improvements, including any new guidance from the ICO. The audits can be undertaken alone or in conjunction with your DPO.
In line with the Data Protection Act 2018 and in conjunction with the ICO published audit reports from MATs, we have designed a portal that enables schools and MATs to hold and log all relevant data protection information in one place. This includes all of our policy and document templates as well as the logging and reporting of data breaches, subject access requests and data decisions. All school-specific documents are hosted here including audit reports and all logs are also easily downloadable for review at governor or trustee level.
Our online tool is hosted and secured on servers located in the UK. Our systems and processes anonymise all data where possible so it is not personally identifiable and we have a regular routine for deletion of any identifiable information.
All of our CPD sessions can be delivered to a whole staff body or we offer bespoke sessions for different groups of staff, for example governors, senior leaders, admin, SENDCO, new starters, or as refresher training. Here is an example of our Data Protection Training for SENDCOs and DSLs.
Our CPD sessions are delivered on site with staff, so they can fully engage and ask questions that are directly relevant to school staff and their specific role. As we are experienced school leaders, we do understand the need for all roles in school, so our advice and guidance is education- and role-specific.
Whole staff sessions run for about an hour, other bespoke sessions can vary in length depending on need. Where INSET time does not allow for one of our sessions, we will provide materials for all content and keep you informed of any relevant updates.
As we don’t want to hold too much personal data, we do not hold lists of names of staff that attended courses but we will record when school training took place and the content delivered.
We have also recently launched our online training platform. You can purchase courses for individual members of staff in our shop or use the link below to purchase group licences for your whole school. Our training platform hosts role-specific training courses including:
Courses typically take an hour to complete and can be used as annual refreshers for staff. Staff will receive a SchoolPro TLC Ltd certificate upon completion.
For more information and to order licences, click below:
Please note – access to our online training platform is FREE for organisations that are signed up to our Data Protection Officer service.
You can expect to see your DPO twice a year for routine visits (audits and training) but they will also be available whenever needed in the event of a data protection incident
Yes, your DPO will be available via phone and email when not visiting your site. You will also have access to our online portal for reporting breaches and subject access requests, logging data decisions and downloading document templates.
Our DPOs will be available to provide support both during term-time and during the school holidays.
We provide all schools with a data sharing agreement to include necessary guarantees about data.
Chilton Foliat primary school were looking for a solution to providing compliance with the new GDPR framework as mandated by the department of education, and I was asked to research and advise a suitable organisation to provide this role. I reached out to a number of organisations that I was able to...
Chilton Foliat primary school were looking for a solution to providing compliance with the new GDPR framework as mandated by the department of education, and I was asked to research and advise a suitable organisation to provide this role. I reached out to a number of organisations that I was able to find on Google who provided GDPR solutions, both in the form of software and training to manage the GDPR tasks, or a Data Protection Officer (DPO) capability for schools and academies. I ended up with a shortlist of 4 organisations who were promoting a GDPR solution, two of which provided software and backup and advisory capabilities, and two that provided a discrete DPO service without the need for costly software products and the training needed to implement an In-house tailored solution. After the school governing body had reviewed the 4 prospectuses, SchoolPro TLC were the unanimous choice to provide a DPO capability that suited our modest needs and which had the most flexible and cost effective solution to help us achieve those objectives. We have found the responses we have received from SchoolTLC to be exemplary thus far and are looking forward to nurturing this partnership as we move forward. We could not have asked for a better quality partner to help us overcome our initial concerns and confusion of developing a GDPR process in such a timely and ordered manner. We have no hesitation in highly recommending this organization to other school looking to achieve GDPR compliance by way of their professional ism, value for money and attentiveness to our initial requirements.’
A pleasure to work with. I would (and will) recommend SchoolPro to any school!
Thanks for the recent documents that have been sent through to the schools – they have been very well received… I have certainly found them useful.
Thank you for providing the peace of mind we all need in a profession, where we are constantly under scrutiny. It is so reassuring to know we can call on...
Thanks for the recent documents that have been sent through to the schools – they have been very well received… I have certainly found them useful.
Thank you for providing the peace of mind we all need in a profession, where we are constantly under scrutiny. It is so reassuring to know we can call on you for advice and guidance when we most need it.
It certainly puts my mind at rest!
SchoolPro TLC have provided DPO services for our school for several years. It’s invaluable to have their expert advice, templates and up-to-date guidance. The recent training session for all our staff hit the right note; important information delivered with humour and understanding of how a school op...
SchoolPro TLC have provided DPO services for our school for several years. It’s invaluable to have their expert advice, templates and up-to-date guidance. The recent training session for all our staff hit the right note; important information delivered with humour and understanding of how a school operates. I would highly recommend their services.
Along with some of our partner primary schools we have utilised the services of SchoolPro as our Data Protection Officer (DPO) to support our school in all of our GDPR matters. The advice and support that we have received as a school can’t be faulted. We have shared ideas with SchoolPro and have been...
Along with some of our partner primary schools we have utilised the services of SchoolPro as our Data Protection Officer (DPO) to support our school in all of our GDPR matters. The advice and support that we have received as a school can’t be faulted. We have shared ideas with SchoolPro and have been highly satisfied with all advice that has been offered. The customer service is outstanding with there being swift responses to any queries that are brought to the attention of the DPO by phone or e-mail and there is always a response within 24 hours and less (this has been most helpful when dealing with a SAR request on the penultimate day of a term where Ian Arkell supported us in the response. He also gave us peace-of-mind in dealing with a GDPR matter where, once briefed, he then made contact with relevant subjects to resolve a matter to the satisfaction of all concerned. Rest assured that you need look no further for any DPO needs than with SchoolPro. BTW…no payment has been received for this review!
Thank you again for your help and your generosity… I have been so pleased with your service that I have no hesitation in recommending SchoolPro to any of the schools in my area.
Thank you, I am very grateful to you for this. I used the document with my online governors meeting and it gave a good framework to plan through. I’d also added notes where we sectioned things and what we had done so made me feel better seeing what we had already put in place.
Thank you, I am very grateful to you for this. I used the document with my online governors meeting and it gave a good framework to plan through. I’d also added notes where we sectioned things and what we had done so made me feel better seeing what we had already put in place.
We have used SchoolPro’s DPO service for 2 academic years. The cost is affordable and the service very good. Ian Arkell has been really helpful with some complicated GDPR issues and SAR requests, as well as the more routine annual inspections and staff training.
We have used SchoolPro’s DPO service for 2 academic years. The cost is affordable and the service very good. Ian Arkell has been really helpful with some complicated GDPR issues and SAR requests, as well as the more routine annual inspections and staff training.
As we approach 2 years working with SchoolPro TLC I cannot recommend them highly enough. They are our Schools DPO and offer a fantastic service which is great value for money.
As well as being your Schools DPO and undertaking annual audits, data mapping, completing DPIA and staff training – They also...
As we approach 2 years working with SchoolPro TLC I cannot recommend them highly enough. They are our Schools DPO and offer a fantastic service which is great value for money.
As well as being your Schools DPO and undertaking annual audits, data mapping, completing DPIA and staff training – They also offer a wide range of other services including curriculum, governance, school improvement and leadership. They have recently completed a detailed website audit for us in line with the new statutory guidance, which is in the process of being actioned – This is also included in the annual cost.
I have personally worked with Richard Morley for 7+ years in various capacities, and his ability to inspire, proven track record of achieving great results teamed alongside his personality and knowledge has led me to build up a great working partnership with him.
If you would like to enquire about SchoolPro TLC services, please don’t hesitate to get in contact with them either via their website – https://test.schoolpro.uk/ or LinkedIn. You will not be disappointed!
Thank you for your help on this matter, once again you have helped us rectify the issue promptly and effectively.
Just wanted to say a big thank you for the clarity and detail of the advice ….. it’s hugely appreciated.
The Blue Kite Academy Trust has been supported by SchoolPro and Ben Craig in particular since September 2022. SchoolPro were already working with 2 schools who had recently joined the Trust so came highly recommended. However we still spoke to a number of providers but decided after speaking with Be...
The Blue Kite Academy Trust has been supported by SchoolPro and Ben Craig in particular since September 2022. SchoolPro were already working with 2 schools who had recently joined the Trust so came highly recommended. However we still spoke to a number of providers but decided after speaking with Ben that SchoolPro would offer the best service. BKAT are extremely happy with the support we have received since September. The prompt responses, the helpful guidance, the easy to use portal, access to training and the reassurance that there is someone to speak to has been gratefully received by the Trust Central Team and Headteachers.
£905 (+ VAT) to £1210 (+ VAT)
dependent on size
Annual Subscription
Full Data Protection Officer Service Comprising:
£600 (+ VAT) to £905 (+ VAT)
dependent on size
Annual Subscription
Core Data Protection Officer Service Comprising:
£460 (+ VAT)
Annual Subscription
Remote Data Protection Support Service Comprising:
Access to our online Data Protection Portal
Annual online training
Breach and subject access request phone support
From £355 (+ VAT)
One-Off Payment
Onsite Data Protection training to suit the needs of your school, college, MAT or other education organisation. This could include one of the following:
£560 (+ VAT)
One-Off Payment
Data Protection Audit against the ICO’s accountability framework including:
1 – Leadership and Oversight
2 – Policies and Procedures
3 – Training and Awareness
4 – Individuals’ Rights
5 – Transparency
6 – ROPA and Lawful Basis
7 – Contracts and Data Sharing
8 – Risks and DPIAs
9 – Records Management
10 – Breach Response and Monitor
The audit produces a RAG rated development / action plan against expectations in each of these areas.
If you’d like to discuss how SchoolPro TLC can support and develop your leadership and management capacity, arrange a conversation with us today.
For a confidential conversation about the needs of your school or organisation, please contact SchoolPro TLC using the links below. Based in Gloucestershire, available anywhere in the UK!
SchoolPro TLC Limited was formed by school and education leaders with over 60 years of experience across all stages of education and in a variety of contexts. The company founders have worked to improve educational provision as both senior leaders and school governors.
Monday – Friday : 8am – 6pm
© 2024 SchoolPro TLC – All Rights Reserved
