UK EdTech providers failing to protect children’s data, regulator warns
ICO audit of 28 companies finds widespread compliance gaps and announces plans for a new EdTech code
A landmark report by the Information Commissioner’s Office has recently been published and sets out plans for a new edtech code. “Edtech Examined”, reveals that many UK educational technology providers are failing to meet their legal obligations when handling children’s personal data. The regulator reviewed 28 EdTech providers, whose products are widely used across primary and secondary schools, in a series of consensual audits between 2024 and 2025. Audited platforms included management information systems, safeguarding tools, behaviour management platforms, learning management systems, class