Data Protection Essentials for Schools.
19 October 2026 2026-10-20 22:50Data Protection Essentials for Schools
Short, practical training on looking after the personal information of pupils, families and staff, based on the regulator’s guidance and written for real school situations.
Who this course is for
- ClassroomTeaching and support staffTeachers, teaching assistants, SENCOs and pastoral staff.
- OfficeOffice and leadership teamsAdmin, business managers, data managers and senior leaders.
- GovernanceGovernors and trusteesEveryone accountable for how the school handles information.
- Wider teamVolunteers and contractorsAnyone who sees school data, and staff in other public sector bodies working with children.
What you’ll learn
The course covers what the Information Commission expects of schools under the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025. Each module has learning outcomes, key points, a school scenario and practice questions.
- Module 1Personal information: what is it?What counts as personal data and what makes someone identifiable.
- Module 2The data protection principlesThe seven principles that apply to every use of personal data.
- Module 3Lawful basis, special category data and biometricsChoosing a lawful basis, plus special category data, DBS data and biometrics.
- Module 4Controllers, processors and international transfersWho is responsible, supplier contracts and sending data abroad.
- Module 5Accountability and governanceThe DPO, DPIAs, records, policies and the data protection fee.
- Module 6Individual rights and privacy noticesPeople’s rights and writing clear privacy notices.
- Module 7Subject access requests and exemptionsRecognising and answering SARs, and when exemptions apply.
- Module 8Security and personal data breachesEveryday security, cyber threats and what to do about a breach.
- Module 9Data sharing and safeguardingSharing information lawfully to keep children safe.
- Module 10Children’s information, online safety and edtechProtecting pupils online, edtech choices, filtering and monitoring.
- Module 11CCTV and video surveillanceUsing cameras lawfully and handling requests for footage.
- Module 12Staff informationRecruitment, staff records, monitoring and working from home.
- Module 13Artificial intelligence in schoolsUsing AI tools safely and keeping humans in charge of decisions.
- Module 14Complaints, the regulator and getting helpHandling complaints and getting help from the regulator.
How it works
1. Work through the modules
Take them in order, at your own pace. Your progress is saved.
2. Check your understanding
Practice questions at the end of each module give instant feedback.
3. Take the final assessment
Ten questions. The pass mark is 80%, and you can retake it.
4. Download your certificate
Your certificate is available as soon as you pass.
Evidence of training for your school’s records
Pass the final assessment to receive a certificate of completion with your name, the course and the date you completed it. We recommend refreshing this training every year.
Start Data Protection Essentials for Schools
About 90 minutes, with a certificate on completion.
Content checked October 2026 against UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and current guidance from the regulator. General training, not legal advice. Your school’s policies and Data Protection Officer are the first port of call for specific questions.