Please note: we're currently updating our model data protection policy and privacy notices, and some of the other articles listed below, to reflect more recent guidance from the Information Commissioner's Office on provisions in the Data Protection Act 2018. Subscribe to updates for any articles you're interested in by clicking 'save for later' at the top of the relevant article page.

Get to grips with your role

• 'Cheat sheet' for DPOs
  Print this to help you remember the key GDPR principles, deadlines and definitions

• To-do list for data protection officers (DPOs)
  Work through these main tasks for your first full term in the role

• DPOs: what your school must do for you
  Your school must help you carry out your role. Here’s what you need from them

• The role of the DPO
  Read this for an in-depth explanation of your duties and the training you might need

Get your staff up to speed

• GDPR cheat sheet, and posters for your staff room and school office
  Share our 'cheat sheet' with them, and display these posters around your school to help everyone remember the dos and don’ts

• 1-minute GDPR explainer
  Share this ready-made, one-page summary with your colleagues

Updates from our DPO network and the latest guidance

• Data protection: latest updates
  All the updates you need in one place, so you don’t miss anything

• Poll results: how is the DPO role taking shape?
  See how your school compares on the time needed to carry out the role, and DPO pay

Dealing with subject access requests

• Subject access requests: guidance and template forms
  Read the rules, and use our template forms to help you respond 
  
• How to respond to subject access requests in the summer holidays
  Find practical solutions to this issue, and a template letter to extend the deadline for 'complex' requests
• Template record for recording information requests
  Use our template record for managing the different types of data requests people can make

Essential templates, model documents and guidance

• Conduct a data purge: decision flowchart
  Use our decision flowchart to help you clean out your filing cabinets and decide what data to keep, minimise, or destroy
  
• Personal data breach procedure and poster
  Download our model procedure for use in the event of a data breach at your school, and put up the poster to help staff know what to do
• Your role in data protection impact assessments
  Get clarity on where you should be involved, with a DPIA template and checklist to help you
  

• The Key's guide to consent (with template consent forms)
  Use our process to work out whether you need to seek consent. If you do, use our template forms for the most likely situations for schools

• Data protection policy and privacy notices: models
  Download our GDPR-compliant model data protection policy and privacy notices and adapt them to your school's setting

• Information audit: template
  Use our downloadable audit template, which includes school-specific prompts, to help you identify what personal data you hold