Best Practice Update

Collage of photos: Harry the Hacker, Where's Harry training poster, seats at a training session, data protection education bag

New Academic Year Kick-Off!

Schools are back in full swing, and so is our work at Data Protection Education! This week, we’ve been busy with data walks, on-site training, and booking meetings across various schools to ensure data protection standards are up to date and effective.
For Data Protection Education this Summer it was all about creating content - researching, writing and building resources designed to support all our customers with their data protection responsibilities.  For schools, as the new academic year begins, it's time to take that knowledge from the screen to the schools.

There's lots of new areas for you to explore on the Knowledge Bank, which include:
The following policies have been updated:
  document Breach Procedure Template (5.18 MB)
  document CCTV Policy Template (3.85 MB)
  document Data Protection Policy Template v1.2 (3.91 MB)
  document Freedom of Information Policy Template (368 KB)
  document Information classification Guidelines Template (3.65 MB)
  document Photo Consent Template (172 KB)
  document Photo Consent Withdrawal Template v1.2 (44 KB)
  document Photo and Video Guidelines Template v1.4 (83 KB)
  document Photos and Videos Policy Template v2.1 (3.73 MB)
  document Photo and Video Release Form Template v1.3 (38 KB)
  document Records and Data Management Policy Template (53 KB)
  document Social Media Policy Template (51 KB)
  document SAR Procedure Template (5.06 MB)
  document Subject Access Request Acknowledgment letter v1.2 (15 KB)
  document Subject Access Request Response Template v2.3 (19 KB)
  document Work off-premises Policy (2.87 MB)


After spending time refining policies, developing training materials, and exploring the nuances of data protection law, we are out and about again, conducting data walks and onsite-training as well as booking online meetings.  It's great for all our consultants to be able to leave their desks behind and get into organisations, engage with staff and see the impact of our work in real-time.

What is a Data Walk (Making the Rounds)?

One of the most effective ways to assess data protection practices is through a data walk.  It's an opportunity to go behind the scenes of an organisation's operations and identify areas where personal data is handled.  From paper files to digital systems, every corner of an organisation can present a potential risk if not managed correctly.

This hands-on approach allows us to -
  • Identify potential risks: whether it's sensitive information left unsecured or outdated systems that pose vulnerabilities, a data walk can bring these issues to light.
  • Engage with staff: being on-site provides the chance to talk directly to the people who are responsible for managing data on the ground.  It's a chance to understand their challenges and offer practical, tailored advice.  
  • Recommend improvements: after the walk we provide actionable (practical) recommendations that help organisations tighten their data protection and cyber security practices.

The Value of On-Site Training

We've all been delivering on-site training sessions in addition to customers accessing our online training.  The training enables us to help staff better understanding their Data Protection obligations and how to handle personal data responsibility.  Training sessions are not just about compliance; they're about empowering staff to make informed decisions and creating a culture where data protection is everyone's responsibility.

If your school is looking for practical advice, a data walk, or training tailored to your needs, don’t hesitate to reach out. Let’s work together to keep your school’s data safe and secure.

Search