General Data Protection Regulation (GDPR)

General Data Protection Regulation (GDPR)

The General Data Protection Regulation 2016 (GDPR) became enforceable on 25 May 2018. The Data Protection Act 2018 (DPA) was revised in the same year and updated data protection laws for the digital age. This new legislation brought new accountabilities for all schools.  The ultimate responsibility and accountability for data protection compliance sits with governors and trustees. This new and revised legislation moves schools from having to show that they ‘comply’ to having to show that they are actively demonstrating and evidencing they are in compliance.

The Data & Assessment team provide a range of GDPR and data protection support to schools.

Click here to view details on the team supporting schools

Amber Badley

Amber Badley, Firebird Data Protection Consultancy Limited, is an independent consultant and associate of Babcock LDP and will be providing Data Protection Officer duties to schools and academies across the South West. Amber holds a Master’s Degree in Information Rights Law and Practice and has 17 years’ experience working in the data protection field in the public sector, including over a decade as a Data Protection Officer for a large County Council.

During this time, Amber has worked with schools supporting them with advice and guidance, which included writing the Devon Photography and Filming in Schools Code of Practice (revised 2010) and the Devon Sharing Children’s Information Code of Practice (2010-2015).

Annette Henry

Annette Henry is an Education Information Analyst and has worked in the Babcock LDP Data and Assessment team since 2011. Annette is a EU General Data Protection Practitioner (GDPR P) and provides support, advice and guidance to schools and academies on all elements of data protection.  Previously Annette has worked with schools providing data and assessment support and guidance in all key stages of the statutory national curriculum, has worked for the Devon Safeguarding Children Board and has held a position as a HLTA in a secondary school.

Contact us:

Please contact us to discuss any aspect of GDPR and data protection either on 01392-287317 or

Interested in our GDPR Services?

Our GDPR offer to schools provides light-touch support for your DPO right through to an outsourced DPO service:

  • DPO Toolkit Lite - £150
    This toolkit includes templates, policies, a recorded staff training presentation and termly newsletters.
  • DPO Toolkit Plus - £600
    This toolkit includes everything in the Lite package PLUS audit templates and 6 hours to our qualified DPO for advice and support.  Staff training is upgraded to an e-learning platform in this offer.
  • Data Breach Support - £488
    Includes recorded data breach presentation, reporting templates and 6 hours access to our qualified DPO for advice and support.
  • DPO CPD Bundle - £299
    Includes a place at our GDPR Masterclass and recorded training presentations as well as our access to our staff training e-learning platform.
  • DPO Termly Networking Forum - £171
  • DPO Cover Service - £POA
    Our qualified DPO can provide cover for absence in your school.
  • GDPR Helpdesk Support - £423
    6 hours access to our qualified DPO for advice and support
  • Outsourced DPO Annual Subscription
    Prices start from £3,550 per school.  MAT and federation packages are available from £2,150 per additional school.

ICO Enforcement Watch

Part of the ICO's role is to take action to ensure organisations meet their information rights obligations.  Details of the most recent enforcement action they've taken is shown below:

13 June 2019:

The Information Commissioner’s Office (ICO) has fined Smart Home Protection Ltd £90,000 for making nuisance calls to people registered with the Telephone Preference Service (TPS).

The Staffordshire company was behind 118,000 unlawful marketing calls made between January 2017 and September 2018 to people registered with the TPS.


Find out more about GDPR and the support on offer

Find out more
Scroll to top