Strategic Data Protection for Modern Trusts

Data protection in a Multi-Academy Trust is more than a compliance exercise, it’s a trust-wide responsibility that directly impacts governance, risk, and strategic decision-making.

In this MAT Insights session, Craig Stilwell, Head of our Data Protection service, alongside Kerrie Jones, Head of Governance, Compliance and Risk at Anglian Learning Trust, will share a trust-level perspective on managing data protection within a complex MAT environment.

They will explore what MATs are required to do, why it matters at trust level, and how to put effective, consistent practices in place across academies and central teams. Drawing on Judicium's real-world experience supporting MATs and Kerrie's reflection on practical challenges and lessons learned, we’ll highlight common sticking points and share practical recommendations that help data protection work in practice, not just on paper.

This session will cover:

• Trust-wide compliance and building a strong data protection culture
• Edtech, data protection impact assessments (DPIAs) and managing subject access requests (SARs) at scale
• Preparing for emerging risks such as AI and biometrics

Let us introduce you to this week's professional speaker

Craig Stilwell

Craig is a qualified solicitor and experienced data protection practitioner who has been with Judicium since 2012. As Head of Data Services, he leads the UK’s largest education-focused data protection team, setting high standards for compliance across schools and Trusts.

Known for his attention to detail and regulatory expertise, Craig ensures practical, accurate advice tailored to the education sector. He has led the development of innovative compliance tools, including an in-house dashboard and AI and redaction services, and is a sought-after speaker and regular contributor to education data protection publications.

Outside of work, Craig enjoys live music, running and supporting Swansea City.