UK GDPR for school staff
Help your school meet its requirements under the UK GDPR. Use this practical course to make sure staff members know their data protection responsibilities, how to keep personal data safe, and what to do if there is a data breach.
Who it's for
All staff
We've updated this course to include your requirements around data protection complaints, which come into effect on 19 June 2026.
This course covers:
- What the UK General Data Protection Regulation (GDPR) is and why it’s important
- Key data protection terms
- The 7 core principles of the UK GDPR, and how they apply in different roles across your school
- Your school’s data protection requirements
- The role of the data protection officer (DPO) and how they can support you
- What to do if there’s a data breach
We want our training to be a positive experience for all learners. If you have any access needs (for example, a visual impairment or dyslexia), please let us know to see how we can help by contacting [email protected].
We'd love to hear your feedback
If you've completed this course, we'd love to hear your thoughts on it. Our feedback form takes about 3 to 5 minutes to complete.
Sources
- UK GDPR guidance and resources, Information Commissioner’s Office (ICO)
- Judicium Education
- Cyber security breaches survey 2024: education institutions annex, GOV.UK
- How to deal with data protection complaints, ICO
More data protection resources for your school
Additional guidance to help you keep personal data safe
Artificial intelligence (AI): dos and don’ts for data protection
Take a look at our tips to make sure you stay compliant with data protection around the use of artificial intelligence (AI) tools. Share them with your team to make sure everyone is on the same page.
‘Special category’ data under the UK GDPR
The UK GDPR classifies some data as ‘special category’, meaning it’s sensitive and needs more protection. Find out what kind of data is defined this way in schools, and the conditions you can use to justify processing it.
Pupil records: transferring to other schools or education providers
See the rules on transferring pupil records when a pupil moves school, and get guidance on how to do this securely for digital and paper copies.
Handling data protection complaints
From 19 June 2026, you must have a process for handling data protection complaints made to your school or trust. Find out how you can meet this requirement.