There have been several suggestions from Local Authorities that schools need to pay them large sums of money in order to be compliant with the new regulations, which come in to force on May 25 2018. We do not believe that the offers we have seen provide best value for money, and we covered this topic at the SBM Forum on 20 February. The final bill has not yet been published; it seems possible that small VA schools will not in fact need to appoint a DPO, and in any case the Information Commissioner has made it clear that she does not expect all schools to have done all the work by the May date.
Schools should, however, be doing a data audit (Business Managers have access to a sample, courtesy of Winkworth Sherwood who have given us permission to share this).
See resources attached.