Sheringham Woodfields is a purpose-built complex-needs school, specialising in Learning and Cognition. Rated ‘Outstanding’, the school supports 90 pupils aged 3-19 with a diverse range of special educational needs and varying intellectual abilities.
Due to the sensitive nature of the pupil data it processes, the school required a partner with sector-specific expertise to help ensure full compliance with the GDPR.
The DPO Centre began by carrying out a comprehensive data discovery exercise, identifying areas of risk and opportunities for improvement. This was followed by a detailed Data Protection Impact Assessment (DPIA), resulting in a school-wide plan for managing both pupil and staff data securely.
A key focus was improving the data minimisation of sensitive pupil medical information held at various points around the school site. The DPO Centre provided tailored recommendations to reduce unnecessary data exposure and strengthen overall data security.
Sheringham Woodfields has implemented these recommendations and now has robust data protection policies in place to safeguard personal information. The school continues to benefit from an ongoing relationship with its dedicated DPO, who remains available to provide advice and answer any data protection queries as they arise.
Matthew Smith, School Business Manager, said:
‘It’s been so helpful working with The DPO Centre – it’s been a straightforward process, and the work conducted has been thorough. We have been given reassurance by our DPO, and we’re pleased to have an ongoing relationship to ensure complete confidence in the important data protection for pupils and staff at our school. We expect the highest standards throughout all areas of our school and working with The DPO Centre has ensured the best data protection for everyone concerned.’