The ICO has published some updated guidance for people and organisations who work in the education sector with children and young people under 18. The idea of the guidance is to help organisations feel confident to share personal information for safeguarding purposes.
Following the Kido nursery breach we've previously published information about, one of our consultants was invited to be guest on the Small Business Cyber Security Guy's podcast.
🔚Microsoft will officially end support for Windows 10 on October 14th 2025 - this means no more security updates, bug fixes or technical support.
A cyber attack on nursery chain, Kido claims to have stolen photos, names and addresses of around 8,000 children. The information includes parental details and carers and safeguarding notes.
Given the Public Sector Fraud Authority estimates that every year between £39.9 billion and £58.5 billion of taxpayer's money is subject to fraud and error, it's no wonder the UK Government has published some guidance about fraud awareness.
Joe Tidy, BBC's Cyber correspondent has published a blog about cyber crime in schools following the ICO issuing a warning about the 'worrying trend' of students hacking their own school and college IT systems for fun or as part of dares. We explore the situation and what you should do when it happens.
Parents of a school in Birmingham are concerned that a school has accidentally shared a spreadsheet which contained student names for children in Year 7 to Year 11 and parental contact details.
The latest release of the "Keeping Children Safe in Education" guidance brings important updates for schools and colleges, including points relating to the rapidly evolving digital landscape. Most of the changes in this year's guidance are technical.
The recent data breach involving Online SCR, an online provider of single central record (SCR) services, has put the personal data of education staff at risk. The breach was a result of a cyber attack on a subcontractor.
As schools begin to welcome back students, staff and new joiners, the focus is on the new academic year: curriculum planning, safeguarding and operational logistics. An equally critical and statutory area that demands attention is data protection and cyber security compliance. Adhering to data protection law isn't just about avoiding fines; it's about protecting sensitive personal data of children, their families and staff.
The Murky Panda (also known as Silk Typhoon) is a cyber threat that has had significant activity since 2023 and has targeted government, technology, academic, legal and professional services. Currently there are reports of the threats only in North America, however, as the Murky Panda has previously targeted compromises in the cloud, it is assumed that they will easily transition to attacks further afield. The threat group is a China-nexus group motivated by intelligence collection.
The ICO Accountability Framework is a crucial tool for any organisation handling personal data, providing a structured approach to data protection compliance. When applied to the Department for Education (DfE) Digital Standards, it becomes a powerful mechanism for schools and trusts to ensure their technology and data practices are not only efficient but also legally compliant and secure.
©2026 Data Protection Education Ltd.