A recent study conducted by Check Point Research which can be found at the bottom of this article has found that there has been a 29% increase in cyberattacks on organisations in the education sector since 2020, the highest increase of any sector.
Schools & MATs
With biometric technology becoming more and more prevalent in society, the governance of the personal data that organisations collect from using this technology has recently been a topic of discussion.
- Tammy Buchanan
- General news
The Children's Code
The Children’s Code
The first update from the ICO is that the transition year for the introduction of The Children’s Code (also known as The Age Appropriate Design Code) has passed, with the code having come into effect on September 2nd.
- James England
- Information/Cyber Security
Cyber Attacks
The National Cyber Security Centre has today upgraded it's advice to schools relating to the prevalence of cybers attacks in the sector:
- Stuart Lee
- Best Practice Updates
Protocol for Setting Up and Delivery of Online Teaching and Learning
These protocols aim to ensure that online lessons with pupils when working from home, are safe, secure and continue to provide high-quality education using a virtual platform.
This is guidance for setting up and managing online lessons using the school’s chosen platform ie Zoom; Google or Microsoft teams.
- James England
- Best Practice Updates
Class Dojo International Data Sharing
Users of Class Dojo will recently have noticed that a requirement to provide consent for international data transfers was included to the login screen.
We've recently had more than one breach reported where physical files have got lost in the post.
In such cases, the sender remains the data controller and is responsible for ensuring that the optimum data security measures are in place during transfer. Where possible, consider whether a physical drop-off (and get a receipt) is a more secure option.
- James England
- Best Practice Updates
Emergency contacts and consent
Do I need consent for emergency contacts?
Actually no, and here's why.
We know that we must have a lawful basis for processing any data, and consent is one of the six lawful bases that can be used.
In light of recent ICO reprimands to schools it is important schools remember best practice for managing photos. The formal legal warnings issued by the ICO recently to schools both related to the processing of photos where no consent had been given.
From the Information Commissioner's Office blog:
A former headteacher has been fined in court for unlawfully obtaining school children’s personal data from previous schools where he worked.
©2026 Data Protection Education Ltd.