Why Fragmented Compliance Creates Board Level Risk in MATs
28 Apr 2026
For many multi‑academy trusts, compliance activity is happening in multiple places at once: policies are drafted and approved, training is delivered, risks are logged, and audits are completed.
Why Cyber Incidents Create Governance Risk in MATs
28 Apr 2026
For many MATs, cyber incidents are still framed as technical problems, something for IT teams to resolve and then move on from. In reality, the most significant governance and compliance risk often begins after the incident occurs.
AI Governance in Schools: What We Assume vs What We Can Prove
28 Apr 2026
A small line in Microsoft’s Copilot terms triggered a significant response a couple of weeks ago. The phrase “ for entertainment purposes only”, when shared without context, understandably raised concerns across education.
Clear, Repeatable, DPIA Workflows for MAT leaders
14 Apr 2026
A consistent, well‑governed DPIA workflow is essential for MATs managing multiple schools.
Vetting EdTech Supplier Compliance for GDPR
13 Apr 2026
It is important that schools and MATs assess EdTech supplier compliance (existing or new) properly to ensure you are able to meet UK GDPR requirements.
Managing Compliance & Complaints with GDPRiS
18 Feb 2026
The introduction of the Data (Use and Access) Act brings an important new requirement for all education settings: by 19 June 2026, every school and trust must have a clear, accessible, and effective data protection complaints process in place. This...
Building Trust-Wide Cyber Resilience
10 Dec 2025
Discover how you can build cyber response playbooks for team-wide readiness and resilience. As digital systems become more interconnected across a Trust, a cyber incident in one school can rapidly affect others, making a coordinated, MAT-wide...
Christmas Data Protection Tips for Schools
5 Dec 2025
Wrap up cyber safety before you wrap up for Christmas.
The Christmas holidays are a time for joy and rest - but for cybercriminals, it’s business as usual. With schools closed and systems unattended, the festive season can be a prime opportunity for...
Top 5 GDPR mistakes schools make (and how to avoid them)
19 Nov 2025
Schools and Multi-Academy Trusts (MATs) handle vast amounts of sensitive data every day, from student records to staff information. In line with UK GDPR requirements, this data must be protected with robust technical and organisational measures.
Capita’s £14M fine: A wake-up call for Data Security in Education
16 Oct 2025
In a landmark decision, the Information Commissioner’s Office (ICO) has fined Capita plc and Capita Pension Solutions Limited (CPSL) a combined £14 million for serious data protection failures, a stark reminder that even the biggest players can fall...