Industry
Education
Schools, training providers and universities hold information about children, families and staff, and use more online services each year.
- Pressure points
- 4 we see most often
- Usual starting point
- Privacy Compliance Review
- Engagements
- Fixed scope and fee
Pressure points
Students trust schools with more than their marks.
- 01
Children's information
The OAIC is finalising a Children's Online Privacy Code, which must be registered by 10 December 2026, and which may affect online services likely to be accessed by children.
- 02
A long tail of education technology
Learning platforms, apps and communication tools each collect student information, often under their own terms.
- 03
Generative AI in classrooms and offices
Staff and students use AI tools for teaching, assessment and administration, often before rules are agreed.
- 04
Records kept for a long time
Student and staff records can be retained for many years, which raises retention and security questions.
This page describes the privacy and governance pressures common to education. It is general information, not advice about your organisation. Whether and how the Children’s Online Privacy Code applies to you will depend on its final form.
Where organisations in this sector usually start
- AssessPrivacy Compliance ReviewA fixed-scope review of how your organisation handles personal information against the Australian Privacy Principles, with a ranked gap register and a 90-day plan.
- AssessAI Governance Readiness AssessmentFind the AI already in use across your organisation, assess it against Australia's Guidance for AI Adoption, and leave with a register, a policy draft and a clear set of priorities.
- AssessData Protection & Information Handling ReviewFind out where personal information sits, who can reach it, how long it is kept, and whether you are ready to respond to a data breach.
Start with a conversation.
A free 20-minute call to understand your situation and recommend the right first step. Scope and a fixed fee are confirmed in writing before any work starts.