Toolkit for the policies and processes schools and multi-academy trusts need to protect personal data and respond effectively to a personal data breach.