GDPR Training for Schools

Amber holds a Masters Degree in Information Rights Law and Practice and has over 20 years experience advising and supporting organisations with their data protection compliance, including Schools, Police Service, Local Government and commercial companies.

Amber acts as the formal Data Protection Officer for a number of schools nationally, which includes independent schools, academies, primary schools, colleges, special schools and a British International School in Europe.

Amber is passionate about her work; always striving to break down unnecessary barriers and supports schools and organisations by providing practical advice and solutions when complex or delicate situations arise.

Amber has extensive experience supporting organisations in a multi-agency setting, writing information sharing protocols, delivering training and producing policies and guidance.  This has included working alongside the Police, Crown Prosecution Service, Local Authorities and schools. 

Amber has over 15 years experience  supporting public sector organisations with complex Subject Access Requests and Freedom of Information Act Requests, which has even led to attending Information Tribunal court hearings as a witness.

Amber was involved in the successful case Dransfield v ICO & Devon County Council (as the FOI Officer) which resulted in the 'vexatious' caselaw and ICO guidance which benefits schools and other public authorities today!

This training provides an overview of the rights people have under the UK GDPR and practical advice on how to handle a Subject Access Request from receipt through to disclosure. 

We will look at the main exemptions used under the data protection laws and explore everyday scenarios faced by schools. 

This includes looking at how to redact tricky correspondence which includes other people's information; safeguarding observations and dealing with requests from separated parents.

£70 (plus VAT)

This training simplifies the complexities around carrying out GDPR due diligence checks on companies (data processors) who handle personal data eg companies providing educational platforms, systems and online resources.

We'll look at what you need to check and how to go about this, including the additional safeguards you need in place when using companies outside the UK.

The training also explores when you need to carry out Data Protection Impact Assessments (DPIAs) and how to do them.  

£70

This training looks at the differences between a Subject Access Request and a  Freedom of Information Act Request (FOIA); the school’s obligations to make information available through a Publication Scheme; the rights individuals have under FOIA and practical advice on how to handle a request from receipt through to disclosure.

We will look at the main exemptions used by schools to refuse requests or withhold  certain information and how to identify and refuse ‘Vexatious  Requests.’  

£70