CPD Live: UK GDPR and Data Protection Refresher

This session provides an essential refresher on UK GDPR and data protection requirements for school leaders, staff, governors, and those with responsibility for data protection compliance. It covers the latest developments in data protection legislation, key compliance obligations, and practical guidance to help schools manage personal data securely and lawfully.

Designed to reinforce existing knowledge and raise awareness of emerging risks, this session explores real-world scenarios and the governance measures schools should have in place to maintain compliance and accountability.

What this course contains

The course provides a practical refresher on key aspects of data protection, including:

• An overview of UK GDPR, the Data Protection Act 2018, and recent developments including the Data Use and Access Act 2025.
• The seven data protection principles and the importance of accountability.
• The role of the Data Protection Officer (DPO) and the Information Commissioner's Office (ICO).
• Understanding Subject Access Requests (SARs) and Freedom of Information (FOI) requests, including key differences and response requirements.
• Recognising, recording, and managing data breaches, including notification obligations.
• The purpose and use of Data Protection Impact Assessments (DPIAs) when introducing new systems, technologies, or processes.
• Common compliance risks within schools, including email security, data handling, and the use of Artificial Intelligence (AI).
• The responsibilities of governors and school leaders in overseeing data protection compliance.
• Practical steps schools can take to strengthen accountability, governance, and staff awareness.

Intended outcomes

By the end of the session, participants will:

1. Understand the latest UK GDPR requirements and developments affecting schools.
2. Recognise their role and responsibilities in protecting personal data.
3. Understand how to identify and respond appropriately to SARs, FOIs, data breaches, and DPIA requirements.
4. Gain greater awareness of risks associated with emerging technologies, including AI.
5. Be able to support and challenge data protection practices within their organisation.
6. Understand the importance of accountability and evidence of compliance.

Why this matters

Schools process significant amounts of personal and special category data relating to pupils, staff, parents, and governors. As legislation evolves and new technologies emerge, it is essential that schools maintain awareness of their data protection obligations and continue to demonstrate compliance.

Poor data handling can lead to complaints, regulatory scrutiny, reputational damage, and, in some cases, enforcement action. This refresher session helps participants stay up to date with current requirements, recognise areas of risk, and understand the practical steps needed to protect individuals' information and support a culture of accountability.

Assessment

There is no formal assessment.  A live Q&A will be available throughout the session to support discussion, practical application, and the sharing of good practice.

Location

• Online via Zoom

Cost

• £60.00 + VAT for Judicium DPO Clients
• £80.00 + VAT for non-Judicium DPO Clients

Should you require multiple attendees, please write to us with the details below, and we will be able to provide you with a bespoke quote.

Important Information

This is a CPD-accredited Course and participants will receive Certificates post-completion.

Please find our terms and conditions for bookings here: https://www.judiciumeducation.co.uk/dpo-training-terms-and-conditions-26