Liability sits centrally, practice sits locally
The trust is the controller and would be the one answering to the ICO — but the decisions that create the risk are taken in eleven school offices, by people who have never met each other.
Groups
Data protection across a multi-academy trust
The trust is the legal entity, so the trust carries the liability — but the practice sits in each school, and it is rarely the same practice twice. We build one approach every school can genuinely follow, and give head office a live view of where each one stands.
What we solve
The problems that actually come up in multi academy trusts settings
Eleven schools, eleven ways of working
Different retention habits, different consent forms, different apps, different views on what a parent is entitled to. Inconsistency is not just untidy — it means a request handled well in one school is handled badly in another.
Growth inherits whatever was there
Each school that joins brings its records, its suppliers and its unexamined arrangements. Without a due diligence step, the trust absorbs problems it does not know it has.
The board needs assurance it can act on
Trustees are accountable but not specialists. They need to know where the trust genuinely stands, in language that supports a decision rather than a report that is filed and forgotten.
Trust overview
Every school in the trust, on one screen.
Head office gets its own view of the Portal, showing where each school stands without anyone having to compile a report. It is read-only by design: each school stays accountable for its own actions, while the trust keeps sight of all of them.
- Latest visual and operational audit ratings for every school, rated red, amber or green
- A ranked list of the schools to look at first — open actions, missing audits, no SAR contact
- Training booked and attended, school by school
- Open and closed SARs, FOIs and breaches for the period, from our case records
- Drill into any school to read its full audit reports
8Schools
7Audited
5Open actions
1No SAR contact
| School | Last audit | Actions | SAR contact |
|---|---|---|---|
| Northfield Academy | Green | 0 | Set |
| Hillside Primary | Amber | 3 | Set |
| Riverside School | Red | 2 | Missing |
| Meadow Lane Primary | Green | 0 | Set |
What’s included
Everything you get, from day one
Every school is different. A ten-minute call is usually enough to tell you where you stand.
- One named DPO across the trust, with a consistent approach in every school
- A single policy and retention framework each school can actually apply
- Due diligence on schools joining the trust, before problems are inherited
- A read-only trust overview in the Portal, so head office can see every school's position at once
- Board-level reporting written for trustees, not for compliance officers
- Central support for breaches and complex requests, wherever they arise
Built for multi academy trusts, not adapted to it.
The same DPO service everywhere would miss what makes your setting different. This is the version that fits.
Talk to a specialist Other settings
We work across the whole sector
Get in touch
Ready to take data protection off your plate?
No obligation — most questions are answered in a ten-minute call.
- Phone 01244 261 379
- Email enquiries@e2e-education.co.uk
Send us a message