Guiding you through the world of data protection with our schools Data Protection Officer (DPO) service

We understand the pressure schools are under to keep data safe. Our dedicated team are experts in managing information risks and can offer packages tailored to your specific needs.

We act as the DPO for a large and growing number of schools across the country. Our schools DPO service fulfils your legal obligation to designate a Data Protection Officer (DPO) and provides your Trust or school with a suite of documentation, support and other benefits as outlined below.

Find out more through our partners at North Yorkshire Education Services (NYES).

 

DPO service

Our full DPO service includes:

Designated DPO

We act as your independent and objective DPO. For example, we advise you about your data protection obligations and act as a point of contact for the Information Commissioner’s Office (ICO).

Find out more about the role of the DPO by reading the ICO’s guide to data protection officers.

Expert advice via our helpline

The helpline is our dedicated phone line and email mailbox. You can rely on the helpline to support you with any data protection related issues that arise in school.

Our team monitor the help desk and are on hand to offer advice and assistance. We can review documentation such as DPIAs, support you with data breaches and subject access requests, and help with complex or routine queries about information sharing and other concerns.

Compliance review and action plan

Once we have onboarded you as a new client, you can opt to receive an initial compliance review to assess your data protection arrangements and identify any gaps. Following the review, we will issue you with a detailed report and bespoke action plan.

After this, you have the option to meet with us annually to monitor progress and help you to build on this foundation over time.

The portal

You will have access to our dedicated client Portal. Here you can access past bulletins, e-learning and the document library containing guidance and a suite of branded resources.

Resources

Our suite of resources is continually growing and covers the key topics we know are important to schools, including:

  • Contract assurance ratings: we have assessed over 300 commonly used applications to check their contracts for UK GDPR compliance.
  • Posters that can be displayed in school to ensure staff are mindful of data protection risks and know who your DPO is.
  • Video content, such as handy bite-sized training on key data protection topics.
  • Guidance on information rights, data breaches, records management, and other essential topics.

Templates

Our suite of template documentation and model logs is also accessible via the Portal. This includes the following:

  • Privacy Notices and Policies
  • A Risk Matrix and Investigation Form for data breaches.
  • Letters for acknowledging and responding to information requests.
  • A bank of over 450 Data Protection Impact Assessments for commonly used applications.
  • Logs for recording information requests, data breaches and destruction of records.
  • An Information Asset Register to record what data is held in school.

Specialist e-learning

Schools that sign up to our DPO service have access to Veritau Learn, our e-learning platform. Access to modules on the platform can also be purchased as a standalone subscription.

 

Webinars

We run annual webinars on helpful topics such as how to complete DPIAs and deal with data breaches. Each school can send up to two delegates per year.

 

Bulletins

We circulate useful and interesting monthly bulletins, to keep you informed about service updates and changes or news that are relevant to schools.

We also send out regular alerts to let you know about current scams and cyber-attacks, so you can avoid them.

DPO+ contract

Our three-year package shows a clear commitment to data protection and allows you to benefit from a price freeze for the duration.

What our clients say

Don’t just take our word for it. Find out what some of our clients had to say about our data protection service:

“I love the DPO Service, the Veritau team are brilliant. If we need any help with anything such as data requests the advice is simple to follow. The regular reviews are helpful and constructive and the policy templates are easy to access.”

Gibside School, Gateshead

 

“I’m really pleased with the service, it is so easy to follow. I learnt more about GDPR in the first two hours than I’d learnt in the previous two years.”

Business Manager, Gateshead School

 

“I can’t recommend Veritau enough. Knowing there is an expert at the end of the phone is so reassuring and the template documents save hours! Thank you!”

Headteacher, Lancaster Christ Church School

Case study

Responding to the rise of AI in the education sector

In recent years, AI’s potential to transform education has gained real momentum, offering exciting possibilities for students and teachers alike.

Read this case study

Case study

Responding to increasing cyber-attacks in the education sector

Cyber-attacks on UK schools, colleges, and universities are on the rise - and with them, serious risks to data protection.

Read this case study

Our team

We have a large team of data protection experts who are all professionally qualified or currently training. They specialise in working with schools and other education bodies, local authorities, and the wider public sector.

At Veritau we provide a variety of assurance services, including internal audit, counter fraud, risk management and information governance. As our client, you have access to wide-ranging expertise and sector-specific knowledge.

A headshot of a Veritau employee

Rosie Kelly

Assistant Director - Information Governance

Rosie is an experienced DPO with a background in the legal sector. She is a Fellow of the IAPP and holds the CIPP/E and CIPM certifications. Rosie specialises in UK GDPR compliance in the education sector, including expertise in Edtech and data protection governance in multi-academy trusts. Rosie leads on AI, risk assessments, contract assurances, international data transfers and promoting awareness of legal changes.

A headshot of a Veritau employee

Robert Beane

Senior Information Governance Officer

Robert brings his wealth of experience in local government management to the delivery of information governance. He supports our schools and corporate clients with the development of assurance frameworks to embed good information governance practice throughout their business. Robert is also Veritau’s own Data Protection Officer.

Becky Dixon Headshot image

Becky Dixon

Senior Information Governance Officer

Becky holds qualifications in FOI, data protection, information security, and records management. She supports our school DPO clients with data protection compliance and leads our training offer, including the annual webinar and eLearning packages. Becky also oversees client communications and alerts, keeping schools and trusts updated on regulatory changes, best practice, and emerging risks.

Get in touch

Do you need a DPO or want to discuss how we can support you? We work with our partners at North Yorkshire Education Services to offer specialist schools services. You can also contact us directly.