Schools manage personal data across dozens of systems, teams and third-party providers. Responsibility for records, rights requests, incidents and vendor assurance is often distributed informally; with no consistent process connecting them.
The result is that privacy activity happens reactively, in isolation and without the documented evidence needed to demonstrate accountability.
Privacy Academy
Practical privacy governance built for schools
A structured professional development programme across the 2026/27 academic year that helps Privacy Leads and DPOs turn data protection from a compliance obligation into a practical, evidence-based discipline — across records, rights, incidents, vendors, impact assessments and visual data governance.
WHO IT'S FOR
For those responsible for privacy; whatever their title
Privacy responsibility in schools doesn't always sit with a dedicated professional. Whether you are a DPO, a Privacy Lead with a broader remit, or a senior leader accountable for data governance, the Privacy Academy is designed to meet you where you are.
Data Protection
DPOs & Privacy Leads
You are responsible for data protection compliance; often alongside other responsibilities. The Academy strengthens your knowledge across all core privacy disciplines, develops your practical capability and gives you a personalised roadmap for your school's next 12 months of privacy activity.
Technology & Operations
IT & Operations Leads with Privacy Responsibilities
Privacy sits within your broader role; covering vendor assurance, system risk, data handling or records management. The Academy builds a more structured, practical and defensible approach to the privacy areas you own.
Leadership
Senior Leaders Accountable for Privacy
You are accountable for your school's approach to data protection but want stronger evidence, clearer processes and a more structured programme behind you. The Academy gives your school the operational foundations to demonstrate accountability; to governors, inspectors and regulators.
THE CHALLENGE
.jpg)
Privacy responsibilities are spread across teams; without connected processes
Understanding the principles is only the first step
Most privacy professionals understand the requirements of their regional privacy laws. The harder challenge is applying them consistently; managing a Subject Access Request under pressure, assessing a vendor with limited documentation, or completing a DPIA for a new system that is already in use.
The Privacy Academy bridges the gap between knowing the rules and being able to apply them in practice within a school environment.
The Privacy Academy bridges the gap between knowing the rules and being able to apply them in practice within a school environment.
When incidents happen, the response isn't always structured or documented
Privacy incidents in schools can develop quickly, involve incomplete information and require fast decisions. Without a structured approach, responses are inconsistent, evidence trails are incomplete and lessons are rarely captured.
The Privacy Academy builds the practical capability and documented processes to respond effectively; and to demonstrate that you did.
The Privacy Academy builds the practical capability and documented processes to respond effectively; and to demonstrate that you did.
WHAT'S INCLUDED
Eleven sessions, seven privacy disciplines, one personalised roadmap; across the 2026/27 academic year
Privacy Governance, Accountability and Planning Induction
A 60-minute interactive induction that helps participants consider how privacy is currently governed within their school — covering accountability, roles, Data Owner engagement, escalation and reporting. The session also introduces the Privacy Roadmap and identifies the priorities that will inform its development.
Your Personalised Privacy Roadmap
Following the Induction, each participating school receives a dedicated 60-minute Privacy Roadmap session with a named 9ine Data Privacy & AI Consultant. Using 9ine's programme planning approach, your consultant works with you to consider your existing privacy arrangements, identify immediate priorities, map dependencies between workstreams and establish a practical 12-month direction for your privacy programme. The Roadmap is a working document — it develops with your school throughout the Academy.
Ten Academy Sessions Across Seven Privacy Areas
The programme covers: Records of Processing Activities · Records Retention · Information Rights (Foundation + Implementation) · Incident & Breach Management (Foundation + Implementation) · Vendor Management (Foundation + Implementation) · DPIAs and PIAs in Practice · Visual Data Ethics and Image Governance. Foundation sessions develop knowledge; Implementation Workshops build practical capability through realistic school scenarios.
Foundation and Implementation Pathways
For Information Rights, Incident & Breach Management and Vendor Management, the Academy provides paired Foundation and Implementation sessions. Foundation sessions are recommended for participants developing or refreshing their knowledge — but participants with existing experience can attend the Implementation Workshop directly.
9ine Platform Access — Privacy & Governance
Participating schools receive access to the 9ine Privacy and Governance Platform throughout the Academy, providing a practical environment in which to build and maintain governance records, manage actions and evidence progress as the programme develops.
9ine Vendor Library Access
Up to three completed vendor assessments from the 9ine Vendor Library, selected by the participating school. Particularly relevant during the Vendor Management Implementation Workshop. Where a vendor is not currently in the Library, that information can inform 9ine's future assessment priorities.
Practical Templates, Resources & Academy LMS
Stage-aligned templates, frameworks, checklists and guidance introduced alongside each session, supported by access to 9ine's Academy LMS and recordings of all live Academy sessions. Resources are designed to be adapted to your school's own environment and continuing privacy activity.
HOW IT WORKS
A structured journey; from induction to implementation across seven privacy disciplines
1
Questionnaire & Preparation
Before the Academy begins, your school completes a short Privacy Academy Questionnaire covering your existing arrangements, current activity and priorities. This contextualises the programme for your school and allows 9ine to tailor cohort discussions to common challenges and areas of interest.
2
Induction
The programme opens with a Privacy Governance, Accountability and Planning Induction — helping you consider how privacy is currently governed, who is responsible for what and where the immediate priorities lie for your school.
3
Your Privacy Roadmap
A dedicated 60-minute session with a named 9ine consultant produces your personalised Privacy Roadmap — identifying priorities, dependencies and the most effective sequence for progressing privacy activity across your school over the next 12 months.
4
Foundation
Foundation sessions develop the knowledge and understanding needed to approach key privacy topics confidently — covering the principles, practical considerations and common challenges relevant to a school environment.
5
Implementation
Implementation Workshops apply that knowledge through practical exercises, worked examples and realistic school scenarios. Participants leave each workshop with practical outputs — a structured approach, an assessment, a documented process — that can be developed further within their own school.
6
Ongoing Development
Your Privacy Roadmap is a working document, not a one-time output. It develops with your school throughout the Academy — reflecting new priorities, completed activity and evolving requirements. Platform access and your named consultant provide continued support as your privacy programme progresses.
YOUR ACADEMY TEAM
Delivered by 9ine's Data Privacy & AI specialists
The Privacy Academy is delivered by consultants who work with schools on privacy and data protection every day — supporting programme development, DPIA work, incident response and vendor assurance across the UK and internationally. Each participating school is assigned a named 9ine consultant for continuity throughout the programme.
10
Academy sessions
7
Core privacy areas
FREQUENTLY ASKED QUESTIONS
Everything you need to know about the Privacy Academy
Who is the Privacy Academy designed for?
The Academy is designed for anyone with responsibility for privacy and data protection within their school — whether that is a dedicated DPO, a Privacy Lead with a broader remit, or an IT or operational lead who holds significant privacy responsibilities. Participants bring different levels of experience, and the Foundation and Implementation pathway structure accommodates that.
How is the Privacy Academy different from the AI Governance Academy?
The two Academies address different governance disciplines. The AI Governance Academy is a whole-school programme built around the Diamond Formation — bringing together leadership, technology, safeguarding and privacy to govern AI. The Privacy Academy is focused on practical data protection capability — designed primarily for those responsible for privacy within the school. The two are complementary: a school can benefit from both simultaneously.
What are the seven privacy areas covered?
The Academy covers: Records of Processing Activities (RoPAs) · Records Retention · Information Rights · Incident and Breach Management · Vendor Management · DPIAs and PIAs · Visual Data Ethics and Image Governance. Three areas — Information Rights, Incident Management and Vendor Management — include both a Foundation and an Implementation session. The remaining four are delivered as standalone Implementation Workshops.
Do I need to attend the Foundation session before the Implementation Workshop?
Foundation sessions are recommended for participants who would benefit from developing or refreshing their knowledge of the subject. They are not a formal prerequisite — participants with appropriate existing knowledge and experience can attend the Implementation Workshop directly.
What is the Privacy Roadmap and what does it involve?
Following the Induction, each participating school receives a dedicated 60-minute session with a named 9ine Data Privacy & AI Consultant to develop a personalised Privacy Roadmap. Using a structured planning approach, your consultant helps you consider your existing privacy arrangements, immediate priorities, dependencies between workstreams and the most logical sequence for progressing activity over the next 12 months. The Roadmap is a practical working document — it evolves as your school's priorities and progress develop throughout the Academy.
What is the cost of the Privacy Academy?
Pricing for the 2026/27 Privacy Academy is confirmed upon enquiry. Contact the 9ine team to discuss the options available, including any dual-Academy arrangements for schools also joining the AI Governance Academy. The programme runs from November 2026 to June 2027.
RELATED SERVICES
Continue developing your governance programme
AI Governance Academy
A year-long guided programme helping schools establish practical AI governance across the Diamond Formation — from baseline to strategy, policy, acceptable use, AI visibility, assessment and approval. The natural companion to the Privacy Academy.
Learn moreDPO Essentials & Privacy Consultancy
Expert privacy support for schools — privacy programme leadership, DPIA support, incident response, vendor assessments, Records of Processing, information rights and a dedicated support desk. Available as subscription or consultancy hours.
Learn morePrivacy — 9ine Platform
The Privacy product on the 9ine platform brings Records of Processing, DPIAs, retention, incidents, information rights and vendor assessments into one connected operating model — with dashboards and workflows that support ongoing programme management.
Learn more
Keep Learning
Latest insights & guidance
JOIN THE ACADEMY
Ready to put good privacy practice into practice?
Complete the form below and a member of the 9ine team will be in touch to discuss joining the 2026/27 Privacy Academy.