Overview
Shaw Education Trust oversees more than 30 schools across the UK. With increasing scrutiny around data protection and rising cyber risks, the Trust needed a smarter, more scalable way to manage GDPR compliance and information requests.
We sat down with Chris Spender, Data Protection Manager at Shaw Education Trust, to understand how GDPRiS has helped unify processes, empower staff, and strengthen leadership oversight.
Challenge
The Trust’s previous systems were fragmented. Subject Access Requests (SARs), Freedom of Information (FOI) requests, and breach reporting were handled inconsistently across schools. Staff training was scattered, and leadership lacked a clear view of compliance status.
Solution
GDPRiS was rolled out Trust-wide, providing a centralised platform tailored to education settings. Key features included:
Unified request management: Staff can now process SARs and FOIs efficiently, with built-in workflows that support mandated response times
Trust-wide compliance dashboard: Leadership teams gain instant visibility across all schools—identifying strengths and addressing gaps proactively
User-friendly interface: Staff of all experience levels navigate the platform with ease, supported by embedded training resources
Centralised documentation: Policies, training materials, and breach logs are stored in one place—accessible to all staff
Guidance and accountability: Built-in self-assessment tools promote staff ownership of data protection responsibilities
Support
The GDPRiS support team remains responsive and hands-on, helping staff maximise platform capabilities and troubleshoot quickly.
Impact
Since adopting GDPRiS, the Trust has seen:
- Faster response times to SARs and FOIs
- Improved staff awareness and confidence in GDPR practices
- A consistent, auditable approach to compliance across all schools
Conclusion
For Shaw Education Trust, GDPRiS has transformed GDPR from a fragmented challenge into a unified, proactive process—supporting safer schools and stronger leadership oversight.