GDPR in Schools

Did you know that nearly half of all emails sent globally are spam? And that 75% of cyberattacks in schools are carried out via phishing? These numbers are a wake-up call for the education sector. Spam and phishing attacks are not just an...

The integration of technology in schools has revolutionised education by enhancing learning experiences, facilitating access to a wealth of information, and enabling innovative teaching methods. However, this technological advancement has also...

Practical Guidance for Schools and Teaching Staff

Developed by the 5Rights Foundation, The Children & AI Design Code sets out a process to identify, evaluate, and mitigate the known risks of AI to children and prepare for the known unknowns. It...

Things are always changing in the EdTech landscape, schools and Multi-Academy Trusts (MATs) often rely on various service providers for essential operations, from payment systems like sQuid Payments to compliance tools such as GDPR.co.uk. However,...

Conducting a data audit is the first step to understanding your data landscape, ensure compliance with regulations like GDPR, and identifying risks related to data protection. Many schools and MATs use external auditors however if you prefer to do...

Balancing privacy and protection. Sharing student data is an essential responsibility for schools, especially for vulnerable children who face challenges requiring additional support. Whether it’s for safeguarding, accessing services, or maintaining...

Understanding the risks and compliance considerations. AI is revolutionising the workplace by enhancing operations and boosting efficiency. A notable trend is the adoption of AI-driven note-taking tools like Otter.ai and Microsoft Copilot, which...

Risks result from adverse effects of data processing and data breaches. What adverse effects do we need to consider? In doing Data Protection Impact Assessments (DPIAs), we are considering risks that result from possible harms to data subjects....

Under GDPR your suppliers (data processors or joint data controllers) are obliged to tell you "without undue delay" about a data breach they have suffered that has affected data that you are the controller for. For the avoidance of doubt, your...