Are your data protection procedures a match for today’s threats?

Forbes Solicitors
December 10, 2025

The education sector is increasingly becoming a target for cyber-attacks. Latest government data shows that educational institutions are more likely to face a cyber-attack or security breach than private businesses.

Secondary schools face the greatest risk, with 60% having suffering an attack or breach over the past 12 months. By comparison, 40% businesses have faced a breach or attack. 89% of these breaches or attacks related to phishing attacks.

Now more than ever, having the right data protection policies and procedures in place is crucial.

At Forbes, our data protection team offers practical, adhoc legal support, plus a range of retainer packages to support your Data Protection Officer and organisation to meet your data protection obligations.

The team advises on all aspects of data protection legislation, including the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003.

Ensuring that your staff understand the duties and obligations of handling data is an essential part of ensuring compliance and avoiding costly legal proceedings. Our experts regularly provide data protection training for schools, academies and colleges.

Available sessions include:

  • GDPR Essentials in Education
  • Subject Access Request Handling
  • Data Breach Handling
  • Data Protection Officer Training

Our training is designed to be practical and outcome focused and can be delivered either in person or online. 

Please contact Gemma Duxbury to discuss your specific needs or visit our website to learn more.