Data Protection

Data Breaches

This session will explain what data breaches and near misses are, and how to identify reportable incidents. It will draw on common data breaches in schools and explore procedures to contain and respond to these incidents and discuss how we can learn from them. The training will also outline how best to keep a breach/near miss log for your school.

Who can attend this course?

All ESCC School staff, Governors, Voluntary and Community Sector

Cost - Non SLA £55 per person , SLA £0 per person

This virtual workshop is free* to schools that have bought into the comprehensive Information Governance Traded Service (IG4/IG5). 

*Up to 10 places

Late cancellation/non-attendance fee apply - see terms and conditions,

This course is organised by the Workforce Development Team, if you have any queries about this course contact - Workforce Development Training Events Team 

Course dates, venue and times
Please make a note of the course code and date, you will need this to book. 
Course code Venue Course dates Time
GDPR106 Virtual, MS Teams 3 May 2024 10:00 - 11:00
This course closes for bookings 1 week before the course start date. Go to booking form

To cancel a course booking or change the name on a booking, please use the cancellation/replacement booking form.


Data Protection: The Basics

This introductory level session covers all the practical aspects of data protection that all school staff need to be aware of and includes examples and case studies based on our work with East Sussex schools. Ideal for any new starters who are new to data protection in schools.

The session will cover:
• What is the UK GDPR?
• Personal data
• Data Protection principles
• Lawful bases for processing
• Data subject rights
• Data breaches

Experienced Information Governance Officers will also be available through the online chat function to provide advice and support throughout the session.

This webinar is free to schools that have bought into the Information Governance Traded Service (IG4/IG5).

Who can attend this course?

All schools staff

Cost - Non SLA £55 per person , SLA £0 per person

Late cancellation/non-attendance fee apply - see terms and conditions,

This virtual workshop is free* to schools that have bought into the comprehensive Information Governance Traded Service (IG4/IG5). 

*Up to 10 places

This course is organised by the Workforce Development Team, if you have any queries about this course contact - Workforce Development Training Events Team 

Course dates, venue and times.
We currently do not have any dates scheduled, we regularly add courses to the programme so please look out for the weekly advertising or keep visiting these pages.

Data Protection Impact Assessments (DPIAs) Training

This workshop session is intended to help school data protection leads develop the knowledge and skills they need to ensure that their school has in place the key documentation required under the GDPR.

This session will focus on Data Protection Impact Assessments (DPIAs), which are risk assessments for data processing that schools are required to carry out in certain situations in order to comply with the GDPR. The session will begin with a brief recap of DPIAs covering:

  • What DPIAs are and why schools need to complete them.
  • Situations when DPIAs are advisable and when they are mandatory under the GDPR.
  • Step-by-step guide to the process for completing a DPIA.
  • A worked example of a school DPIA to demonstrate the process involved.

It will also draw upon real examples taken from local schools to ensure that the content is as appropriate and specific as possible.

This webinar is free to schools that have bought into the Information Governance Traded Service (IG4/IG5).

Who can attend this course?

All schools staff

Cost - Non SLA £45 per person , SLA £0 per person

Late cancellation/non-attendance fee apply - see terms and conditions,

This virtual workshop is free* to schools that have bought into the comprehensive Information Governance Traded Service (IG4/IG5). 

*Up to 10 places

This course is organised by the Workforce Development Team, if you have any queries about this course contact - Workforce Development Training Events Team 

Course dates, venue and times.
We currently do not have any dates scheduled, we regularly add courses to the programme so please look out for the weekly advertising or keep visiting these pages.

Data Protection: Information Security

This session is intended to help attendees understand the key information security issues affecting schools and look at ways to minimise these risks.

The session will cover a range of topics including:
- Password security and two factor authentication
- Digital footprints
- Phishing and hacking

It will also draw upon real examples taken from local schools to ensure that the content is as appropriate and specific as possible.

Who can attend this course?

All ESCC School staff, Governors, Voluntary and Community Sector

Cost - Non SLA £55 per person , SLA £0 per person

This virtual workshop is free* to schools that have bought into the comprehensive Information Governance Traded Service (IG4/IG5). 

*Up to 10 places

Late cancellation/non-attendance fee apply - see terms and conditions,

This course is organised by the Workforce Development Team, if you have any queries about this course contact - Workforce Development Training Events Team 

Course dates, venue and times
Please make a note of the course code and date, you will need this to book. 
Course code Venue Course dates Time
GDPR103 Virtual, MS Teams 14 May 2024 10:00 - 11:00
This course closes for bookings 1 week before the course start date. Go to booking form

To cancel a course booking or change the name on a booking, please use the cancellation/replacement booking form.


Email Management and Security

This session looks at emails as 'records' and provides advice on best practice for managing school emails. We will provides tips on organising emails and inboxes, and cover the retention and disposal of emails. We will also look at email security - what are the risks and what can we do to minimise these.

Who can attend this course?

All ESCC School staff, Governors, Voluntary and Community Sector

Cost - Non SLA £55 per person , SLA £0 per person

This virtual workshop is free* to schools that have bought into the comprehensive Information Governance Traded Service (IG4/IG5). 

*Up to 10 places

Late cancellation/non-attendance fee apply - see terms and conditions,

This course is organised by the Workforce Development Team, if you have any queries about this course contact - Workforce Development Training Events Team 

Course dates, venue and times
Please make a note of the course code and date, you will need this to book. 
Course code Venue Course dates Time
GDPR107 Virtual, MS Teams 8 July 2024 10:00 - 11:00
This course closes for bookings 1 week before the course start date. Go to booking form

To cancel a course booking or change the name on a booking, please use the cancellation/replacement booking form.


Record of Processing Activities (ROPA)

This session is intended to help school data protection leads develop the knowledge and skills they need to ensure that their school has in place the key documentation required under the GDPR. The session has been created to cover one of the key documents that we get the most questions about from schools, the Record of Processing Activities (ROPA). We will cover this document in detail explaining when and why it is necessary, what it should include and will also incorporate worked examples to demonstrate what the completed school document should look like.

Who can attend this course?

All ESCC School staff, Governors, Voluntary and Community Sector

Cost - Non SLA £55 per person , SLA £0 per person

This virtual workshop is free* to schools that have bought into the comprehensive Information Governance Traded Service (IG4/IG5). 

*Up to 10 places

Late cancellation/non-attendance fee apply - see terms and conditions,

This course is organised by the Workforce Development Team, if you have any queries about this course contact - Workforce Development Training Events Team 

Course dates, venue and times
Please make a note of the course code and date, you will need this to book. 
Course code Venue Course dates Time
GDPR104 Virtual, MS Teams 13 June 2024 11:00 - 12:00
This course closes for bookings 1 week before the course start date. Go to booking form

To cancel a course booking or change the name on a booking, please use the cancellation/replacement booking form.


Records Retention and Disposal Training

This workshop session is intended to help school data protection leads develop the knowledge and skills they need to ensure that their school has in place the key documentation required under the GDPR.

The session will focus on common records management issues in schools including defining retention periods and creating a retention schedule.
It will also draw upon real examples taken from local schools to ensure that the content is as appropriate and specific as possible as well as signposting available resources to assist attendees with implementing effective records management processes in their own schools.

This webinar is free to schools that have bought into the Information Governance Traded Service (IG4/IG5).

Who can attend this course?

All schools staff

Cost - Non SLA £55 per person , SLA £0 per person

Late cancellation/non-attendance fee apply - see terms and conditions,

This virtual workshop is free* to schools that have bought into the comprehensive Information Governance Traded Service (IG4/IG5). 

*Up to 10 places

This course is organised by the Workforce Development Team, if you have any queries about this course contact - Workforce Development Training Events Team 

Course dates, venue and times
Please make a note of the course code and date, you will need this to book. 
Course code Venue Course dates Time
GDPR105 Virtual, MS Teams 26 June 2024 10:00 - 11:00
This course closes for bookings 1 week before the course start date. Go to booking form

To cancel a course booking or change the name on a booking, please use the cancellation/replacement booking form.


Refresher for all School Staff

These training sessions are intended to help school data protection leads and staff maintain the knowledge and skills they need to ensure that their school is compliant with the UK GDPR and Data Protection Act 2018. This virtual training session will provide a brief refresher on all the key parts of the legislation and a reminder of the school’s obligations under data protection. It is aimed at staff who have completed data protection training in the past but would like a refresher.

The session will give a brief reminder on all the key points of data protection, including:

  • Data Protection Principles
  • Lawful bases
  • Consent
  • Data subject rights
  • Data breaches
  • Technical and organisational measures

Who can attend this course?

All ESCC School staff, Governors, Voluntary and Community Sector

Cost - Non SLA £55 per person , SLA £0 per person

This virtual workshop is free* to schools that have bought into the comprehensive Information Governance Traded Service (IG4/IG5). 

*Up to 10 places

Late cancellation/non-attendance fee apply - see terms and conditions,

This course is organised by the Workforce Development Team, if you have any queries about this course contact - Workforce Development Training Events Team 

Course dates, venue and times
Please make a note of the course code and date, you will need this to book. 
Course code Venue Course dates Time
GDPR102 Virtual, MS Teams 18 April 2024 11:00 - 12:30
This course closes for bookings 1 week before the course start date. Go to booking form

To cancel a course booking or change the name on a booking, please use the cancellation/replacement booking form.


SARs and FOIs - Access to Information

This session is intended to develop your understanding of the information requests commonly received by schools (including SARs and FOIs). We will cover how to recognise and respond to the different information requests as well as looking at the redactions and exemptions that may need to be applied before data can be released.

  • Subject access requests
  • Freedom of Information
  • Requests under Pupil Information Regulations

Who can attend this course?

All ESCC School staff, Governors, Voluntary and Community Sector

Cost - Non SLA £45 per person , SLA £0 per person

This virtual workshop is free* to schools that have bought into the comprehensive Information Governance Traded Service (IG4/IG5). 

*Up to 10 places

Late cancellation/non-attendance fee apply - see terms and conditions,

This course is organised by the Workforce Development Team, if you have any queries about this course contact - Workforce Development Training Events Team 

Course dates, venue and times.
We currently do not have any dates scheduled, we regularly add courses to the programme so please look out for the weekly advertising or keep visiting these pages.

Training for Governors

This session is designed to provide school governors with specific information about how data protection legislation impacts their role in schools.  The session will:

  • Provide an overview of the new General Data protection Regulations (GDPR) and Data Protection Act 2018
  • Explain what governors need to know about data breaches, subject access requests and data processing within schools.
  • Outline how governors can monitor Data Protection compliance within their school.

Who can attend this course?

School Governors

Cost - Non SLA £45 per person , SLA £0 per person

This virtual workshop is free* to schools that have bought into the comprehensive Information Governance Traded Service (IG4/IG5). 

*Up to 10 places

Late cancellation/non-attendance fee apply - see terms and conditions,

This course is organised by the Workforce Development Team, if you have any queries about this course contact - Workforce Development Training Events Team 

Course dates, venue and times.
We currently do not have any dates scheduled, we regularly add courses to the programme so please look out for the weekly advertising or keep visiting these pages.