Educational institutions hold some of the most sensitive personal data in the economy — student records, staff files, disciplinary data, medical notes and, increasingly, research and biometric data. We help Boards of Governors, Principals and university Councils govern that responsibility with confidence.
Advisory support for Boards of Governors, Vice-Chancellors and Principals, Company Secretaries, Data Protection Officers and ICT Managers.
From learner management systems to CCTV on campus, educational institutions carry governance duties that go well beyond the classroom.
Learner records, grades, disciplinary files and, for younger students, data belonging to children who cannot themselves consent.
Employment, payroll, performance and disciplinary data for teaching and non-teaching staff, plus workplace monitoring.
Research involving human subjects, health data or biometric samples requires its own lawful basis and ethical governance.
Learning management systems, exam platforms and payment portals are usually run by third parties processing data on the institution's behalf.
Structured, evidence-based engagements built around how schools, colleges and universities actually operate.
An independent governance review purpose-built for educational institutions, covering student, staff and research data end to end.
Download the Executive Brief →Independent review of learning management systems, exam platforms and other ed-tech vendors processing data on the institution's behalf.
Explore Board Advisory Services →An institution-wide Digital Trust review, benchmarking governance maturity from the classroom to the Boardroom.
Explore the Compliance Retainer →Our Executive Brief for school Boards of Governors and proprietors, recent ODPC and High Court matters involving learning institutions, and the Practice Notes our education clients rely on most.
If you are responsible for privacy, cybersecurity or digital governance at a school, college or university, we would be pleased to discuss your priorities and practical next steps — no obligation.
A short monthly briefing from the Kenya Privacy Law Review — new ODPC determinations, guidance notes, and compliance deadlines. No spam, unsubscribe anytime.