Question to the Department for Education:
To ask the Secretary of State for Education, whether schools are required to inform her Department when their websites and servers are hacked.
As per my answer to PQ 62140, the Department for Education provides guidance to schools on how to protect data including the key principles, obligations and duties in relation to the Data Protection Act. Schools are not required to notify the Department if their website of servers are hacked, but in the event of a suspected serious breach or loss of personal or private information, schools should report the incident to the Information Commissioner’s Office.