School Centric:

A a highly secure, cloud-based tool included within the basic package designed to reflect existing processes and the way schools work, whilst pro-actively prompting them to meet and exceed the new General Data Protection Regulations.

Powerful Features:

The best of the best is combined in the tool, it documents data flows, mapping and audit of all personal data, and prompts the use of SAQs. It will guide ALL school staff to a new level of data protection understanding.

Simple & Intuitive:

The tool has been designed with schools in mind, we have made it as simple and intuitive as possible ensuring it is easy to use and making it an invaluable tool for schools looking to achieve full GDPR compliance.

Awesome Support:

DPAS is dedicated to helping schools meet and exceed the requirements of GDPR advocating accountability and demonstrating compliance. Our team are on hand to offer friendly and timely guidance to support you in achieving this goal.


- Creates your Schools Record of Processing Activity and evidences due diligence on the suppliers that your school uses (for example, parent pay)

- Demonstrates accountability for staff training Allows staff to report data incidents
- Allows your DPO or Data Champion to manage audits, policy updates and breaches Your one stop GDPR school shop!


Training is a key part of your GDPR compliance. All staff with access to personal data should have a basic level of Data Protection knowledge.


With our training package, staff have access to a questionnaire via our online tool which will demonstrate their GDPR knowledge. They also have access to online training videos. 

Further to the above your school's Data Champion will be given further training to ensure that they are able to answer data protection questions from staff members. 

Your Data Champion or your DPO will be able to choose two courses to attend of the following CPD accredited courses to attend at one of our training centres during the course of the package:

  • EU/Foundation Course 

  • Record of Processing Activity Course included for your DPO or Data Champion

  • Data Privacy by Design Course 

  • Data Breach Course 

We have over 20 years of pragmatic and hands on experience within the Data Protection Industry. All of our qualified trainers are involved in GDPR training many public and private organisations. We have a training centre in the South West, as well as a Partner Centre within London.


All of our courses are accredited by the Continual Profession Development Certification Service 

Delegates will gain credits by passing and attending each training course. 


The certificates gained by delegates do not have an expiry date. However, based on industry best practice guidelines, the recommended renewal period for this training is 2 years. 


On successful completion of the courses detailed below, delegates will be sent a quality assured certificate. This can be used to provide evidence for compliance and audit.


One of the biggest changes introduced under GDPR is that schools must now have a Data Protection Officer.

  • The GDPR introduces a duty for you to appoint a data protection officer (DPO) if you are a public authority or body.

  • DPOs assist you to monitor internal compliance, inform and advise on your data protection obligations, provide advice regarding Data Protection Impact Assessments (DPIAs) and act as a contact point for data subjects and the supervisory authority.

  • The DPO must be independent, an expert in data protection, adequately resourced, and report to the highest management level.

Most schools do not have that internal member of staff to take on the Data Protection Officer role that has the experience that the GDPR requires. 

Therefore outsourcing your DPO is a cost effective option for schools, allowing you to meet the regulatory requirements. 

Our DPO will work closely with your school's Data Champion, ensuring that Data Protection processes are in place and compliance levels are maintained. 

Our outsourced Data Protection Officer will support your School in the following way:


  • Provides a yearly audit report to the Governors​

  • Registered with the ICO​

  • Liaises with the School's Data Champion​

  • Supports your school in the event of an ICO audit​

  • Provides Independent advice when required ​

  • Can provide subject matter expertise on DPIA's​

  • Can assist with Data Breaches or near misses


When talking to schools about their GDPR compliance, we know that school's understand that certain policies need to be updated, and some need to be created from scratch. 

With our inclusive policy pack, schools can simply input their information into the suite of documents and they will be ready to roll out. 


Our policy suite includes the following documentation: 

  • Template Record of Processing Activities 

  • Privacy notice for staff

  • Privacy notice for staff

  • Cookie notice 

  • Data protection policy

  • Information governance policy

  • Subject access request process and policy

  • Data breach policy

  • Data retention schedule and template

  • Individual rights process and procedure 

  • DPIA policy and template 

  • Consent form

  • CCTV policy

  • Management and monitoring of electronic devices

  • and more.. 


Contact us and find out how our Data Protection services can benefit your company.Before filling in the form please ensure you have read and understood our privacy notice.


10 Oaktree Place, Marsh Barton, Exeter,

Devon EX2 8WA

01392 914019

  • Black LinkedIn Icon
  • Black Facebook Icon
  • Black Twitter Icon

©2019 Data Privacy Advisory Service Ltd. ALL RIGHTS RESERVED


01392 914019

0203 3013384

 Privacy Notice

Please note all information on this website is for your help and guidance. It should not be regarded as an authoritative

or definitive statement of the law.