You are here:
DPO resource hub
Are you the DPO for your school or trust?
Join more than 1,000 members who are already part of The Key's DPO network. You'll be the first to know about new resources and get exclusive insights into what other DPOs are doing from our polls and case studies:Yes, I'm the DPO Invite your colleague
Please note: we're currently updating our model data protection policy and privacy notices, and some of the other articles listed below, to reflect more recent guidance from the Information Commissioner's Office on provisions in the Data Protection Act 2018. Subscribe to updates for any articles you're interested in by clicking 'save for later' at the top of the relevant article page.
Get to grips with your role
- 'Cheat sheet' for DPOs
Print this to help you remember the key GDPR principles, deadlines and definitions
- DPOs: what your school must do for you
Your school must help you carry out your role. Here’s what you need from them
- The role of the DPO
Read this for an in-depth explanation of your duties and the training you might need
Get your staff up to speed
- GDPR cheat sheet, and posters for your staff room and school office
Share our 'cheat sheet' with them, and display these posters around your school to help everyone remember the dos and don’ts
- 1-minute GDPR explainer
Share this ready-made, one-page summary with your colleagues
Updates from our DPO network and the latest guidance
- Data protection: latest updates
All the updates you need in one place, so you don’t miss anything
- Poll results: how is the DPO role taking shape?
See how your school compares on the time needed to carry out the role, and DPO pay
Dealing with subject access requests
- Subject access requests: guidance and template forms
Read the rules, and use our template forms to help you respond
- How to respond to subject access requests in the summer holidays
Find practical solutions to this issue, and a template letter to extend the deadline for 'complex' requests
- Template record for recording information requests
Use our template record for managing the different types of data requests people can make
Essential templates, model documents and guidance
- Conduct a data purge: decision flowchart
Use our decision flowchart to help you clean out your filing cabinets and decide what data to keep, minimise, or destroy
- Personal data breach procedure and poster
Download our model procedure for use in the event of a data breach at your school, and put up the poster to help staff know what to do
- Your role in data protection impact assessments
Get clarity on where you should be involved, with a DPIA template and checklist to help you
- The Key's guide to consent (with template consent forms)
Use our process to work out whether you need to seek consent. If you do, use our template forms for the most likely situations for schools
- Data protection model policy
Download our GDPR-compliant model data protection policy and adapt it to your school's setting
- Information audit: template
Use our downloadable audit template, which includes school-specific prompts, to help you identify what personal data you hold
More from The Key
Evidence-led training courses that make it easy to upskill staff, anytime, anywhere.
CPD Toolkit is the most effective way to virtually deliver evidence-led training and support the professional development of your staff. Downloadable courses and online 5-minute summaries provide flexibility for training, whether staff are participating as skeleton staff in-school, via video call or individually at their own pace.
The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence v3.0.