Grammar School at Leeds Case Study
The Grammar School at Leeds is an independent school educating pupils from nursery through to sixth form, with around 2,100 pupils and 500 staff. Data protection is led by the Data Manager who also acts as DPO, supported by DPP’s outsourced services.

The Grammar School at Leeds Case Study, Data Protection Support
The Grammar School at Leeds educates around 2,100 pupils with 500 staff. The school partnered with DPP for outsourced support and practical expertise to build policies, contracts, and compliance processes.
This could easily be a full time role. In education, people are often asked to cover data protection alongside their day job, but the risks of getting it wrong are huge.
The Challenge
Responsibility initially sat with a senior leader as a side duty, leaving gaps such as missing ROPA, incomplete supplier contracts, and no structured DPIAs.
Our Solution
- Initial support from outsourced DPOs with regular contact
- Rewriting policies and building frameworks from scratch
- Supplier contracts and due diligence reviews
- Specialist advice on SAR handling in education
The Results
- Around 70 percent of compliance achieved with a clear plan for the rest
- Significant improvement in supplier reviews and due diligence
- Greater confidence for the in house DPO with expert backup
- Ongoing improvements in retention schedules and training awareness
Ollie is fantastic. When I ask a question, I get a good answer.
About the Client
An independent school with complex data protection obligations across pupils, parents, and staff.
Need similar support Get in touch with our team.
Related reading, Outsourced DPO Services, GDPR Support Desk.