Last reviewed on 11 May 2022
School types: All · School phases: All
Ref: 36013

Use our template to make sure you're giving your governors all the information they need to know about data protection and your school's compliance with the UK GDPR.

Download our template report

Fill in our template report to update your governors on how your school is meeting the requirements of the UK General Data Protection Regulation (UK GDPR). Reporting to the highest level of management is a requirement for data protection officers (DPO) under the UK GDPR.

How often should you do this?

The UK GDPR doesn't say how often you need to do this, but we'd recommend that you:

  • Always deliver an annual report 
  • Update governors whenever there is a data breach or other important development - you could notify the chair, tell the data protection link governor if you have one, or attend the full governing board or most relevant committee meeting