Monthly GDPR Newsletters
Practical, jargon-free GDPR guidance for schools, trusts, and mission-led organisations — published monthly by the PublicTec data protection team.
Each month we break down the latest GDPR developments, share practical compliance tips, and highlight the guidance most relevant to schools and charities — all in one easy-to-read briefing.
Newsletter Archive
Browse our previous editions by sector — click any issue to read the full briefing.
Education
Guidance for schools, Multi-Academy Trusts and the wider education sector.
GDPR in Schools: Preparing for the New Academic Year
The DfE security incident, the ICO’s EdTech report, new data protection complaint requirements, updated photo and CCTV guidance, and a September compliance checklist.
Summer Updates Before September
DfE guidance updates following the Data (Use and Access) Act, a new dedicated EdTech procurement section, refreshed ICO privacy notice tools and SAR guidance, plus a 10-point summer readiness checklist.
New Complaints Law Live & EdTech Audits
The new statutory data protection complaints law now in force, the ICO’s major EdTech audit findings, new DfE filtering and monitoring guidance, and an FOI decision on interpreting requests fairly.
Countdown to New Complaints Law
The countdown to new statutory data protection complaints requirements, refreshed ICO children’s privacy guidance, AI-generated FOI requests, and a major cyber-security enforcement action.
Children's Privacy in the Spotlight
The ICO's Switched on to privacy campaign, new DfE guidance on photographs and CCTV, Reddit's appeal of a £14.47m children's privacy fine, and the importance of proper FOI process.
Photos, CCTV & Children’s Privacy
Expanded DfE guidance on photographs, video and CCTV in schools, the ICO’s focus on children’s age assurance and automated recruitment decisions, and FOI decisions highlighting statutory handling risks.
Public Sector
Guidance for local authorities, public bodies and mission-led organisations.
Cyber Resilience, Insider Access & Data Protection Capability
Consolidating lessons on cyber resilience, insider access, private communications and building genuine data protection capability across public bodies.
Council Insider Access, WhatsApp Review & FOI Exemptions
A council employee prosecuted for unlawful access, a government review of private messaging channels, and FOI decisions on personal data exemptions.
DUAA Live, Complaints Duty & Healthcare Record Access
The Data (Use and Access) Act provisions now in force, the new statutory complaints duty operational, and the ICO’s warning on inappropriate access to healthcare records.
AI-Generated FOI, Complaints Countdown & Cyber Fine
ICO guidance on AI-generated FOI requests, the countdown to new data protection complaints requirements, and a nearly £1m cyber-security fine.
Cookies Guidance, FOI Cost Limits & Environmental Information
Final ICO cookies and tracking guidance, FOI cost limits and the duty to assist, vexatious request exemptions, and the Environmental Information Regulations.
Police Scotland Fine, Facial Recognition & Public-Task Data Sharing
A £66,000 fine for Police Scotland, ongoing ICO scrutiny of facial recognition technology, and new guidance facilitating lawful public-task data sharing.
Get the Newsletter Delivered Monthly
Subscribe to receive our monthly GDPR briefing straight to your inbox — no spam, just practical compliance guidance you can act on.
We use cookies
We use cookies to improve your experience on our website. By continuing to browse, you agree to our use of cookies. Read our Privacy Policy for more information.