Data Protection Guidance

Information and resources for schools to support compliance with Data Protection legislation.

The UK GDPR is the UK General Data Protection Regulation. It is a UK law which came into effect on 01 January 2021. It sets out the key principles, rights and obligations for most processing of personal data in the UK. It is based on the EU GDPR (General Data Protection Regulation (EU) 2016/679) which applied in the UK before that date (since 25th May 2018), with some changes to make it work more effectively in a UK context.

UK GDPR is supplemented by the Data Protection Act 2018, and are referred to collectively as data protection legislation. The Education Authority aim to ensure that schools understand and are taking steps to ensure they are meeting the requirements of data protection legislation. 

The Data Protection School Resource Hub provides support materials, detailed guidance documents and useful templates that schools can use to ensure they are compliant with the UK GDPR requirements.

Contact Us

If you require further advice and guidance in relation to data protection, you can contact the Authority’s Information Governance team:

Telephone: 028 9047 5011      
Email: [email protected]

Last updated: 24/02/2025