DPO resource hub
Are you the DPO for your school or trust?
Join more than 1,000 members who are already part of The Key's DPO network. You'll be the first to know about new resources and get exclusive insights into what other DPOs are doing from our polls and case studies:
Yes, I'm the DPO Invite your colleaguePlease note: we're currently updating our model data protection policy and privacy notices, and some of the other articles listed below, to reflect more recent guidance from the Information Commissioner's Office on provisions in the Data Protection Act 2018. Subscribe to updates for any articles you're interested in by clicking 'save for later' at the top of the relevant article page.
Get to grips with your role
- 'Cheat sheet' for DPOs
Print this to help you remember the key GDPR principles, deadlines and definitions
- DPOs: what your school must do for you
Your school must help you carry out your role. Here’s what you need from them
- The role of the DPO
Read this for an in-depth explanation of your duties and the training you might need
Get your staff up to speed
- GDPR cheat sheet, and posters for your staff room and school office
Share our 'cheat sheet' with them, and display these posters around your school to help everyone remember the dos and don’ts
- 1-minute GDPR explainer
Share this ready-made, one-page summary with your colleagues
Updates from our DPO network and the latest guidance
- Data protection: latest updates
All the updates you need in one place, so you don’t miss anything
- Poll results: how is the DPO role taking shape?
See how your school compares on the time needed to carry out the role, and DPO pay
Dealing with subject access requests
- Subject access requests: guidance and template forms
Read the rules, and use our template forms to help you respond - How to respond to subject access requests in the summer holidays
Find practical solutions to this issue, and a template letter to extend the deadline for 'complex' requests - Template record for recording information requests
Use our template record for managing the different types of data requests people can make
Essential templates, model documents and guidance
- Conduct a data purge: decision flowchart
Use our decision flowchart to help you clean out your filing cabinets and decide what data to keep, minimise, or destroy - Personal data breach procedure and poster
Download our model procedure for use in the event of a data breach at your school, and put up the poster to help staff know what to do - Your role in data protection impact assessments
Get clarity on where you should be involved, with a DPIA template and checklist to help you
- The Key's guide to consent (with template consent forms)
Use our process to work out whether you need to seek consent. If you do, use our template forms for the most likely situations for schools
- Data protection model policy
Download our GDPR-compliant model data protection policy and adapt it to your school's setting
- Information audit: template
Use our downloadable audit template, which includes school-specific prompts, to help you identify what personal data you hold
More from The Key
Empower your governing board and drive school improvement together.
The Key for School Governors will give you total assurance that every member of your governing board is competent in their role, Ofsted-ready and working with you as one unified team.
CPD Toolkit makes it easy to run training in-house
Covering topics including differentiation, assessment, SEND and growth mindset, CPD Toolkit has been created by subject experts and tested by teachers to guarantee practical, engaging training that's also excellent value for money.
- Need-to-know: Ofsted extends curriculum transition period for a year 14 Feb 2020 08:01
- In the news: Your weekly round-up for 7 - 14 February 2020 14 Feb 2020 08:00
- Need-to-know: Secondary performance tables published 6 Feb 2020 10:08
- In the news: Your weekly round-up for 24 - 31 January 2020 31 Jan 2020 08:00
- Need-to-know: DfE announces replacement for P scales 1-4 27 Jan 2020 10:57
The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence.