Delete or Defend? The Data Retention Decisions That Could Save (or Sink) Your School or MAT

In an age where sensitive pupil and staff data sits at the heart of every school and MAT, how long you keep it , and how well you protect it, is no longer just a compliance tick-box. Recent UK data shows that over half of personal data breaches in schools are caused from within, with students exploiting weak controls and poor practices to access systems, while wider cyber-attack prevalence continues to rise across the education sector.

Yet despite this heightened risk landscape, many settings lack clear policies on how long data should be retained, creating unnecessary exposure that can turn a minor incident into a major breach, costing time, reputation and regulatory compliance.

If you want to make informed retention decisions that protect your organisation, reduce risk and build resilience, join us for this pragmatic session. 

This session will cover:

• Fundamentals of Data Protection
• Data Retention and Risk Exposure
• Integration with Breach Management
•  

Let us introduce you to this week's professional speaker

Amaanat Khaira

Amaanat is a Data Protection Consultant within Judicium’s Data Protection Officer (DPO) team. After completing an LLB (Hons) in Law, Amaanat began her legal career, gaining valuable experience handling sensitive and complex matters within the social housing sector. During this time, she developed a strong foundation in navigating complex regulatory compliance and client-focused legal practice.

She later transitioned into the field of privacy and data protection, where she has built over two years of experience supporting organisations through GDPR requirements, risk management, and information governance. Wanting to play a more proactive role in providing strategic compliance guidance, Amaanat joined Judicium Education as a Data Protection Consultant. In her role, she works closely with schools and multi-academy trusts to manage data protection responsibilities and provide practical advice on emerging areas such as AI governance and information security controls.