Supporting schools with data protection during Covid-19

Our data protection officer team had to adapt the service quickly during Covid-19. Rapid response was essential and the team worked flexibly to support schools however they were running during the lockdown.

Because of our wide variety of schools and academy clients, many of them had different regulations at different times. The whole schools team contributed to making sure the new adaptations and changes in working practices were met with appropriate guidance.

Our work supporting schools during Covid-19 included:

  • Created an adaptable privacy notice to cover all new processing related to the pandemic
  • Created template information for Information Asset Registers, to help schools easily fulfil their Article 30 GDPR obligations
  • Created templates for Data Protection Impact Assessments, which allowed schools to examine and document risks associated with mass testing of pupils and staff
  • Monitored new guidance from the DfE to ensure that data protection considerations were being taken into account by schools, and issued guidance through bulletins and alerts to keep schools informed
  • Conducted regular catch ups and meetings with schools via video conference so they could continue to monitor and determine where GDPR compliance can be improved in their schools during the lockdown
  • Incorporated Covid-19 into our compliance review topics so we could examine how schools were coping and that they had the necessary protections in place
  • Created additional guidance about remote working apps, communication apps, information security and working from home to help schools prevent data breaches during remote working, which created new challenges for information security
Comments from our DPO clients:

“Veritau provide an excellent service to our school. The information, advice and template documents that are available on the portal are invaluable and take away all the worry of getting things wrong. 

“Advice requested by telephone and email are answered in a timely manner and the online training sessions ensure that staff are always mindful of GDPR as they carry out their everyday tasks.”

– Scarborough Pupil Referral Service

“The security of an expert on the end of the phone to help you through concerns with a common sense approach has been invaluable to our school.”

– Levens CE School, Cumbria

Speak to Veritau’s schools data protection team
Megan Hopcraft, Senior Information Governance Officer

Megan Hopcraft

Senior Information Governance Officer

Megan started with Veritau as a trainee, and holds certification in Data Protection, Freedom of Information and Information Management Principles. She leads on information sharing projects, data protection impact assessments and data breach investigations. Megan specialises in issues relating to schools and educational settings.

[email protected]

01904 553048

Andy Nutting, Information Governance Manager

Andy Nutting

Information Governance Manager

Andy has over 20 years’ experience working in information governance within local government. He specialises in the development and implementation of bespoke information strategy, policy and processes. Andy has a professional interest in making information open and transparent, and enhancing ethical considerations around data.

[email protected]

01904 552752

Robert Beane, Senior Information Governance Officer

Robert Beane

Senior Information Governance Officer

Robert brings his wealth of experience in local government management to the delivery of information governance. He supports our schools and corporate clients with the development of assurance frameworks to embed good information governance practice throughout their business. Robert is also Veritau’s own Data Protection Officer.

[email protected]

01904 552933

Helen Swan, Information Governance Manager

Helen Swan

Information Governance Manager

Helen is a professionally qualified information governance practitioner specialising in information sharing arrangements, particularly issues surrounding safeguarding practices. She leads on data breach investigations, providing advice to clients and liaising with the ICO.

[email protected]

01904 552438