Data Protection is everyone's responsibility.
Data Protection is a legal requirement . Is your school doing everything it should be doing?
Is your school up to date with Information Governance?
Does it have effective systems processes and procedures in place, and are staff fully versed in the implications of the Data Protection Act?