An email was sent to schools on 8 September 2025 outlining concerns raised about how Exemplar Education may be handling or accessing personal data in school contexts. The concerns involve potential non-compliance with data protection obligations under UK GDPR. The email seems to have been sent to a large number of schools as a spamming exercise.
Key Points:
Schools should not share any personal data (e.g. student names, parent contacts) with Exemplar Education or similar providers without a clear lawful basis and proper data-sharing agreements in place. It appears the company has been dissolved.
If your school has worked with Exemplar Education, please review any agreements or communications you’ve had with them and ensure data protection protocols were followed.
There is no immediate action required from schools at this stage, but you may wish to contact your Data Protection Officer (DPO) if you need any further information.
