Data protection essentials for governors and trustees

This module will be released on 30 November 2026

E-learning

22/11/2026

This module will be released on 30 November 2026

At a glance

This module covers everything board members must know to fulfil their statutory obligations around data protection.

You will cover:

the basics of UK GDPR and the Data Protection Act 2018

the seven principles of data protection

when governors and trustees might be processing personal data

the characteristics of good governance and data protection

Study time

45 minutes

Certificate upon completion

Module description

Almost every interaction a school has with pupils, parents and staff can generate information; admissions, attendance, safeguarding, SEND, exclusions, complaints and HR matters all rely on personal data.

Effective data protection is therefore about more than just compliance: it is also about ensuring a culture where information is respected, handled carefully and used appropriately. For governing boards, this means understanding why data protection matters and ensuring the school or trust has the appropriate arrangements in place to meet its legal and other responsibilities.

Who developed this module?

Deiniol Sandford

Senior Advice Officer

Deiniol provides advice and guidance to Gold members via email and telephone, alongside writing for the website, magazine and weekly newsletter. Prior to joining NGA, Deiniol studied International Relations & Politics at the University of Lincoln.

View Deiniol's full profile

Ruth Agnew MBE

Strategic Lead for Governance Professionals

As Strategic Lead for Governance Professionals, Ruth is responsible for championing and supporting the role of governance professionals across the education sector. She oversees the organisation’s offer to governance professionals, including the development and delivery of professional development programmes, publications and the management of network meetings and conferences.

View Ruth's full profile

Compliance & legislation