GDPR DPO as a Service for Schools

GDPR DPO as a Service for Schools

Article 39 of the GDPR (General Data Protection Regulation) requires public authorities and bodies, including schools and trusts, to appoint a DPO (data protection officer).

If you do not have the necessary data protection knowledge or expertise, you can outsource the role to independent experts.

We are therefore developing our outsourced DPO service to meet the needs of schools and trusts. 

Enquire today
Price: £0.00
Excluding VAT

What will this service include?

This service is still being developed, but should include:

  • DPO advice and guidance
    Contact your DPO via telephone, email or live chat whenever you need advice or guidance on data breaches or subject access requests. This will be based on an agreed number of hours per year, with extra hours available to buy as and when necessary.

  • A sector-specific online portal
    Unlimited access to relevant guidance and an FAQ bank.

  • A primary contact for the supervisory authority
    The DPO will act as the key contact and communications channel between your school or trust and the Information Commissioner’s Office.

  • Support with data breaches and subject access requests
    We will provide process documentation to help you deal with these, and will be on hand to offer advice as required.

  • An organisational GDPR gap analysis and compliance plan
    We will provide a sector-specific tool and guidance for you to review your school or trust’s level of compliance with the GDPR. From this, a compliance plan will be generated that we will review with you.

  • Initial training and support for your key contact
    We will include video training for your key contact. We are hoping to offer a day of face-to-face training to this individual once the service begins, and we know how many schools are using it and where they are located.

  • A sector-specific GDPR pocket guide
    We are tailoring one of our bestselling pocket guides for schools and will provide this as part of the package.

  • Staff training
    To help ensure all permanent and supply staff understand their obligations, we will include a staff awareness training presentation for you to introduce them to the GDPR.

As well as everything outlined, your data protection officer will be available to your lead contact for the following number of hours, divided into ten-minute chunks.

  • Primary schools: 18 hours per annum or six hours per term.
  • Secondary schools: 24 hours per annum or eight hours per term.


Key Contacts




About us

Led by our management team of experienced DPOs (data protection officers), lawyers, barristers, and information and cyber security experts, we provide DPO, breach, data privacy management, and data subject access request support, and associated non-reserved legal services.

We offer legal risk and compliance consultancy advice that you can trust, but without the burden of administrative duties and expenses that law firms must bear in order to carry out certain ‘reserved legal activities’, such as litigation, conveyancing and advocacy.

Speak to an expert

If you have any queries or you’re unsure of how to progress, please get in touch with our team of experts who will be able to assist with your enquiry and provide guidance options.

Enquire today