Every DPIA your school needs, ready to go
47 school activity templates and four specialist DPIAs, from admissions and attendance to EdTech, biometrics and SEND. Built for busy school leaders and business managers.
New apps arrive every term. DPIAs rarely keep up.
Teachers want to try a new app, the canteen wants fingerprint payments, a parent asks about CCTV. Each can need a DPIA, and children's information needs extra care. DPOHub gives schools a quick, proportionate route through every one, with the risk calculated for you.
Built for schools, not adapted from business
| Feature | Benefit |
|---|---|
| 47 school activity templates covering the whole school year | Start most of the way there, whatever comes up |
| Short DPIA route when there is one warning sign | A proportionate, signed-off record for busy school leaders |
| EdTech DPIA for apps and online services pupils use | Check apps before pupils log in, not after |
| Pupil biometrics DPIA, including parental consent rules | Canteen and library biometrics right from day one |
| SEND and medical DPIA | The most sensitive pupil information, properly protected |
| Safeguarding records built in, in line with Keeping Children Safe in Education | Data protection never gets in the way of keeping children safe |
| Children's data questions throughout | Meets the extra care the law expects for children |
| School profile answered once | Your MIS, platforms, security and policies reused for every activity |
| "DPO check suggested" flags | Your DPO's time goes where it is really needed |
| Works for single schools and multi-academy trusts | One approach across every school in the trust |
Start from a ready-made template
Admissions and attendance
Admissions and in-year transfers, attendance register, children missing education.
Behaviour and pastoral care
Behaviour and exclusions, wellbeing, school counselling, mental health support team referrals.
Teaching and assessment
Recording lessons, careers and UCAS references, early years learning journals, exams, census returns.
SEND and health
SEND register and EHC plans, healthcare plans, medication, first aid, allergies.
Safeguarding
Safeguarding and child protection records, allegations against staff.
Trips, catering and payments
Educational visits, clubs, free school meals and pupil premium, cashless catering.
IT and site
Learning platforms and apps, web filtering and monitoring, CCTV, visitor management.
Staff and governance
Safer recruitment, single central record, absence, appraisal, payroll, governors and trustees.
...and more. 47 templates in total.
Add-on DPIAs that open when needed
EdTech DPIA
Opens for any app or online service. Covers age-appropriate design, the supplier's terms, AI features and where data is stored.
Pupil biometrics DPIA
Opens for fingerprint or face recognition. Covers parental consent, the pupil's right to refuse, and the alternative offered.
SEND and medical DPIA
Opens for special educational needs and health information.
CCTV DPIA
Opens for cameras in school. Covers toilets and changing areas, signs, retention and access.
Three steps from activity to signed-off DPIA
Pick an activity
Start from one of our templates, such as payroll, CCTV, school admissions or council tax. Your organisation profile fills in the systems, security and policies you use everywhere.
Answer the screening
Part 1 checks the legal triggers and tells you the route: no DPIA, a Short DPIA or a Full DPIA. Each question uses the data protection term, explains it in plain English and gives the law behind it.
Get your outputs
DPOHub calculates the risks, lists the actions, and produces your DPIA report, any add-on DPIAs and your ROPA row, ready for sign-off.
Your data never leaves your organisation
DPOHub DPIA runs entirely in your web browser. Nothing you type is sent to DPOHub or anyone else. You keep your work as project files in your own OneDrive or SharePoint.
- No accounts, no cookies, no analytics
- Optional password protection with strong (AES-256) encryption
- Licensed to your organisation and hosted by you
- Works in Edge, Chrome, Firefox and Safari, on desktop, tablet and phone
Frequently asked questions
Does a new app always need a DPIA?
Not always. The screening tells you whether it needs none, a Short DPIA or a Full DPIA, and records why.
Who completes it, the DPO or the school?
The school completes it; the tool shows where your DPO should check. If you have a DPO, they will access this. If you do not, DPOHub can help: contact consult@dpohub.co.uk
Does it work for academy trusts?
Yes. Each school can use the same profile and templates, so the trust gets consistent DPIAs.
Does it cover schools outside England?
Yes. It notes where the law or guidance differs in Wales, Scotland and Northern Ireland.
Is pupil data sent to DPOHub?
No. Everything stays on your school's systems.
Say yes to new ideas, safely
Use our interactive checker to find out how the Schools edition works for your trust or school.
Advice only. DPOHub DPIA and its results are guidance, not legal advice. Every organisation and every situation can be different, so check the answers and results before you rely on them, and ask your DPO. If you have a DPO, they will access this. If you do not, DPOHub can help: contact consult@dpohub.co.uk