Over 1 in 3 schools aren’t compliant with basic data protection obligations

Today (Thursday 26 January 2017), SWGfL publishes its annual assessment report of UK schools’ online safety policy and practice. This year’s report was compiled by Professor Andy Phippen from Plymouth University, and assesses data provided by more than 8,000 schools via the multi award-winning 360 degree safe – an online, interactive self-review tool that enables schools to review their online safety provision and develop an action plan to bring about improvements.

Over recent years, the report has disclosed a lack of knowledge amongst teachers and this definitely remains the case over the last 12 months, with almost half of schools (49%) having had no staff training to date around online safety.

Data Protection Failure

The key area of concern identified by this year’s analysis however is the revelation that a third of UK schools are failing to manage sensitive data about young people safely. More than 1 in 3 schools (34%) admitted to not having a data protection policy in place, despite having a legal responsibility to securely store and manage sensitive personal data about children and young people.

This is of particular concern with impending new General Data Protection Regulations (GDPR) set to be implemented in May 2018. The new laws place greater emphasis on organisations to inform people of how their data is used, with failure to comply with the rules set to incur substantial financial penalties.

Consistent Improvement

The report also concludes that while there has been consistent improvement in leadership and management of online safety strategy in the last 12 months, there is a significant and growing gap in governor involvement; 30% of schools have no governor involvement in their online safety strategy and 55% of schools do not provide online safety training to governors. This raises concerns that without sufficient knowledge governors are unable to challenge senior leaders in schools about their online safety practices, which may place young people at risk.

Protecting Young People

More positively, the report shows that in general schools have good connectivity and are doing a good job at protecting young people from harmful content, with filtering and supporting acceptable-usage agreements, including policies around digital images and video.



Professor Andy Phippen from Plymouth University said: “In this 6th annual assessment report we can see that schools are making progress but it does highlight that there are some significant and worrying gaps, not least with compliance with statutory obligations.”

Ken Corish, Online Safety Manager at SWGfL went on to comment: “It is obviously worrying that schools are struggling with data protection compliance, but this is something we saw emerge in the data earlier in the year. In response we have just launched a brand new self-review tool called 360data which helps organisations test and improve their data protection policies and practices.”

Download Full Report

Back to Magazine


Related Articles

WannaCry – the importance of data security

WannaCry – the importance of data security

Andrew Williams, Online Safety Consultant and resident data protection expert offers a guide on ransomware and how SWGfL’s 360 Data can help protect your organisation against malicious attacks.

17 May 2017
Online Safety
SWGfL unveils new and improved 360 degree safe

SWGfL unveils new and improved 360 degree safe

360 degree safe just got better. Our award winning online safety self-review tool has undergone a major upgrade making it more secure, reliable and user friendly.

12 May 2017
Online Safety
Bursting the Bubble: Why Online Safety Education needs to evolve

Bursting the Bubble: Why Online Safety Education needs to evolve

How do we know that the online safety education programmes we provide are making a difference? Ken Corish outlines the case for developing a set of standards for online safety to develop resilience in children and young people

2 March 2017
Education Services
Ransomware: the risks and how to avoid them

Ransomware: the risks and how to avoid them

At SWGfL, we have helped several schools recover after the impact of a Ransomware attack, by providing expert consultancy and support. Last year we highlighted the challenges posed by Ransomware attacks, and it continues to be a threat faced by many schools.

27 January 2017
Online Safety, Education Services
What a great way to start a new school year

What a great way to start a new school year

It's always nice to start a new school year on a positive note and that is exactly what 19 schools are doing after receiving the 'E-Safety Mark' award for excellence in online safety practice.

30 August 2016
Online Safety