Guiding you through the world of data protection with our schools Data Protection Officer (DPO) service

We understand the pressure schools are under to keep data safe. Our dedicated team are experts in managing information risks and can offer packages tailored to your specific needs.

We act as the DPO for over 600 schools across the country. Our schools DPO service fulfils your legal obligation to designate a Data Protection Officer (DPO) and provides your Trust or school with a suite of documentation, support and other benefits as outlined below.

Find out more through our partners at North Yorkshire Education Services (NYES).


DPO service

Our full DPO service includes:

Designated DPO

As your DPO, we advise you on a wide range of data protection matters and correspond with the Information Commissioner’s Office (ICO) on your behalf.

Expert advice via our helpline

The helpline is our dedicated phone line and email mailbox. You can rely on the helpline to support you with any data protection related issues that arise in school.

Our team monitor the help desk and are on hand to offer advice and assistance. We can review documentation such as DPIAs, support you with data breaches and subject access requests, and help with complex or routine queries about information sharing and other concerns.

Compliance review and action plan

Once we have onboarded you as a new client, you can opt to receive an initial compliance review to assess your data protection arrangements and identify any gaps. Following the review, we will issue you with a detailed report and bespoke action plan.

After this, you have the option to meet with us annually to monitor progress and help you to build on this foundation over time.

The portal

You will have access to our dedicated client Portal. Here you can access past bulletins, e-learning and the document library containing guidance and a suite of branded resources.


Our suite of resources is continually growing and covers the key topics we know are important to schools, including:

  • Contract assurance ratings: we have assessed over 210 commonly used applications to check their contracts for UK GDPR compliance.
  • Posters that can be displayed in school to ensure staff are mindful of data protection risks and know who your DPO is.
  • Video content, such as tutorials and a useful training video for ancillary staff.
  • Guidance on information rights, data breaches, records management, and other essential topics.


Our suite of template documentation and model logs is also accessible via the Portal. This includes the following:

  • Privacy Notices and Policies
  • A Risk Matrix and Investigation Form for data breaches.
  • Letters for acknowledging and responding to information requests.
  • A bank of over 50 Data Protection Impact Assessments for commonly used applications.
  • Logs for recording information requests, data breaches and destruction of records.
  • An Information Asset Register to record what data is held in school.

Specialist e-learning

Schools that sign up to our DPO service have access to Veritau Learn, our e-learning platform. Access to modules on the platform can also be purchased as a standalone subscription.



We run annual webinars on helpful topics such as how to complete DPIAs and deal with data breaches. Each school can send up to two delegates per year.

We also post an on-demand video version of the webinar to the Portal for those that missed the session or would prefer to watch in their own time.



We circulate useful and interesting monthly bulletins, to keep you informed about service updates and changes or news that are relevant to schools.

We also send out regular alerts to let you know about current scams and cyber-attacks, so you can avoid them.

DPO+ contract

Our three-year package shows a clear commitment to data protection and allows you to benefit from a price freeze for the duration.

What our clients say

Don’t just take our word for it. Find out what some of our clients had to say about our data protection service:

“I love the DPO Service, the Veritau team are brilliant. If we need any help with anything such as data requests the advice is simple to follow. The regular reviews are helpful and constructive and the policy templates are easy to access.”

Gibside School, Gateshead


“I’m really pleased with the service, it is so easy to follow. I learnt more about GDPR in the first two hours than I’d learnt in the previous two years.”

Business Manager, Gateshead School


“I can’t recommend Veritau enough. Knowing there is an expert at the end of the phone is so reassuring and the template documents save hours! Thank you!”

Headteacher, Lancaster Christ Church School

Case study

Supporting schools with data protection during Covid-19

Our data protection officer team had to adapt the service quickly during Covid-19. Rapid response was essential and the team worked flexibly to support schools during lockdown.

Read this case study

Our team

We have a large team of data protection experts who are all professionally qualified or currently training. They specialise in working with schools and other education bodies, local authorities, and the wider public sector.

At Veritau we provide a variety of assurance services, including internal audit, counter fraud, risk management and information governance. As our client, you have access to wide-ranging expertise and sector-specific knowledge.

Helen Swan - Assistant Director – Information Governance

Helen Swan

Assistant Director – Information Governance

Helen is a professionally qualified information governance practitioner with experience in delivering services across the public sector. She oversees Veritau’s schools, councils and access teams, focusing on business development and client relationship management.

Rosie Kelly - Information Governance Manager

Rosie Kelly

Information Governance Manager

Rosie is an experienced DPO with a background in the legal sector, who holds the CIPP/E certification from the IAPP. She specialises in UK GDPR compliance in the education sector, including expertise in Edtech and data protection governance in Multi-Academy Trusts. Rosie leads on training and resources, contract assurances, international data transfers and promoting awareness of regulatory changes.

Alison Sigsworth - Senior Information Governance Officer

Alison Sigsworth

Senior Information Governance Officer

Alison holds qualifications in information security management, FOI and data protection and leads on projects including privacy notice, Information Asset Register and policy reviews. She works in our schools team, supporting school staff and governors to make sure data protection aligns with their strategic objectives.

Robert Beane - Senior Information Governance Officer

Robert Beane

Senior Information Governance Officer

Robert brings his wealth of experience in local government management to the delivery of information governance. He supports our schools and corporate clients with the development of assurance frameworks to embed good information governance practice throughout their business. Robert is also Veritau’s own Data Protection Officer.

Get in touch

Do you need a DPO or want to discuss how we can support you? We work with our partners at North Yorkshire Education Services to offer specialist schools services. You can also contact us directly.