Update - WisePay
We are aware that many schools have been affected by the large data breach that WisePay suffered between 2nd – 5th October. From the communications that many of you have received and shared with us, WisePay have requested schools to help determine who has been affected by the breach and to assist WisePay to reach out to those affected parents.
We have spoken to WisePay about this approach as we feel that, where possible, they should be the organisation to contact those affected and remedy the data breach. Whilst schools can of course assist WisePay, on occasion it appears the level of support they have requested was excessive.
Whilst we have had communication with WisePay their position remains that they are unable to contact those individuals affected. We have queried this position and given some suggestions to assist them in remedying the breach but have not received a satisfactory response.
In the meantime we thought it best just to give some practical guidance to assist those schools affected: -
- WisePay (and not the school) are ultimately responsible for the data breach. Whilst schools can assist them (as they have requested), if this would involve a disproportionate amount of time, you are well within your rights to refuse to assist further.
- Should you refuse to assist, I would suggest communicating this to WisePay. We can assist with this communication.
- You do not need to contact the ICO directly. WisePay have already contacted the ICO and you do not have a separate obligation to do so.
- If you have any queries/questions about this data breach do contact us in the first instance and we will do our best to assist (and where necessary contact WisePay on the school’s behalf).
Related content
This blog is based on Judicium’s Health and Safety ‘Sofa Session’ from the 7th January 2026, with our resident expert Jamie Ashard CMIOSH. This session focused on Common key stressors in the education sector, Applying the 6 key HSE management standards for stress, Completing a stress risk assessment and implementing practical solutions.
On Tuesday 16th December 2025, the Employment Rights Bill was finally passed in Parliament and today, it has received Royal Assent! It is now the Employment Rights Act 2025. Read this blog on our latest update on the Employment Rights Bill and what you need to know.
This is a summary taken from Judicium’s DPO ‘Sofa Session’ from the 12th December, with our Data Protection Consultant Daniel Richardson.
This is a summary from Judicium’s Safeguarding and Thrive ‘Sofa Session’ from 3rd December, with our Judicium Safeguarding consultant Joanne Bocko, Thrive Head of Innovation and Principal Trainer, Viv Trask-Hall and Director of Thrive, Tom Preston. Drawing on decades of combined experience in safeguarding, governance, SEND, leadership, and mental health, the panel unpacked how the framework’s shifts will impact schools, what Ofsted will be looking for, and how leaders can position themselves for success.
On 27 November 2025, the UK government altered a flagship commitment in the Employment Rights Bill and dropped plans to grant most workers protection from unfair dismissal from their first day of employment. Instead, the Bill will now grant unfair-dismissal rights after six months of continuous service. Read this blog to uncover the reasons why, what this means for schools and how we can help.
This blog is based on Judicium’s Health & Safety and SEND session on 26th November with resident expert India Cottenden
Sofa Sessions | H&S