UK GDPR: personal data breach procedure

Download our model procedure and use it in the event of a data breach at your school. If you have any data breaches, use our template to record the details.

Last reviewed on 26 September 2023
School types: AllSchool phases: AllRef: 34764
  1. Use our model data breach procedure
  2. Download our template record

Use our model data breach procedure

We've created a model data breach procedure based on guidance on personal data breaches from the Information Commissioner's Office (ICO). Download the procedure and adapt to reflect your school's context. 

KeyDoc: personal data breach procedure DOCX, 128.5 KB

Approved by Forbes Solicitors, all of our model documents take account of relevant requirements and good practice. They're easy to adapt, will save you time and help you keep your school compliant.

This document can also be found as an appendix to our model data protection policy.

Download our template record

As we set out in our model procedure above, you should document the details of any data breach and the decisions you make in all circumstances – including where you don't report the breach to the ICO. 

Use our template to

The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence v3.0.