Keeping Schools and Trusts Compliant and a Special Focus on Governance

In 2023, the education sector accounted for 14% of the reported data breach incidents to the UK's Information Commissioner’s Office (ICO). The most common causes in education were human error, such as emailing or sharing data with unintended recipients, and phishing attacks.

Data protection is a critical responsibility for schools given their role in safeguarding the personal and sensitive information of students, parents, and staff. Under GDPR and the Data Protection Act 2018, schools must ensure that the data they handle is secure, used appropriately, and shared only when necessary. 

So how can schools and trusts work to stay compliant? 

During the session we will be looking at:

• Responsibility for GDPR compliance
• Data requests
• Handling sensitive and confidential information effectively

Let us introduce you to this week's professional speaker

Lucy Kirkman-Kovacs

Lucy is a law postgraduate, whose previous legal experience includes child law, education, and establishing several pro-bono initiatives which are prevalent today in supporting those in need of legal aid. As a highly experienced Chair of Governors, Lucy brings a wealth of experience to strategic planning, devising, and implementing robust strategies, with an established track record in guiding governing boards and mentoring senior leadership through complex regulatory landscapes, emphasising compliance and operational excellence. Outside of work, Lucy spends her time illustrating, is an avid fan of science-fiction and enjoys outdoor climbing.