CPD Live: Data Breaches

This session provides practical guidance on identifying, assessing, managing, and reporting data breaches within schools and trusts. Participants will gain a clear understanding of what constitutes a personal data breach, how risk is assessed, and the steps that should be taken to minimise harm and ensure compliance with UK GDPR requirements.

Designed for school leaders, administrative staff, governors, and anyone handling personal data, the session uses realistic school-based scenarios to help participants understand their responsibilities and respond confidently when incidents occur.

What this course contains

The course covers the key aspects of data breach management, including:

• Understanding what personal data, special category data, and data breaches are.
• Recognising the different types of breaches, including unauthorised disclosure, access, loss, alteration, and destruction of data.
• Assessing risk and understanding the difference between risk and high risk.
• Considering the factors that affect severity and likelihood when evaluating a breach.
• Understanding when a breach must be reported to the Information Commissioner's Office (ICO).
• When and how affected individuals should be notified.
• The importance of breach logs, documentation, and accountability.
• Practical breach response procedures, escalation routes, and containment measures.
• Common school data breach scenarios and lessons learned.
• Emerging risks associated with Artificial Intelligence (AI) and the handling of personal data.
• Creating a positive culture where breaches and near misses are reported and addressed appropriately.

Intended outcomes

By the end of the session, participants will:

1. Understand what constitutes a personal data breach.
2. Be able to identify potential breach situations and respond appropriately.
3. Understand how risk and high risk are assessed in relation to data breaches.
4. Know when a breach should be reported to the ICO and when affected individuals may need to be notified.
5. Recognise the importance of timely escalation and accurate record keeping.
6. Be more confident in helping their organisation reduce the likelihood and impact of data breaches.
7. Understand how AI tools can create additional data protection risks and how to use them safely.

Why this matters

Data breaches can occur in any organisation, regardless of size or sector. Schools process large amounts of personal and sensitive information relating to pupils, staff, parents, and governors, making effective breach management essential.

A failure to recognise, report, or appropriately respond to a data breach can lead to complaints, regulatory scrutiny, reputational damage, and significant consequences for affected individuals. By understanding what to do when incidents occur, schools can reduce risk, comply with legal requirements, and maintain trust within their communities.

This session provides practical guidance to help participants respond quickly, minimise harm, and foster a culture of good data protection practice.

Assessment

There is no formal assessment. A live Q&A will be available throughout the session to support discussion and practical application.

Location

• Online via Zoom

Cost

• The course costs £60.00 + VAT for Judicium DPO Clients and £80.00 + VAT for non-Judicium DPO Clients.
• Should you require multiple attendees, please write to us with the details below, and we will be able to provide you with a bespoke quote.

Important Information:

Please find our terms and conditions for bookings here: https://www.judiciumeducation.co.uk/dpo-training-terms-and-conditions-26