[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-627175-105":3,"detail-sidebar-cat-0-en-105":80,"doc-detail-627175-en":130},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":73,"head_meta":75,"extra_data":77,"updated_unix":79},105,"en","dpia-data-protection-impact-assessment-user-guide-for-oaks-platform","DPIA Data Protection Impact Assessment - User Guide for Oak’s Platform","","User guide for completing a Data Protection Impact Assessment (DPIA) for Oak’s platform, supporting compliance with data protection laws and helping ensure safe, secure use by teachers and other users. The guide explains when and how to perform a DPIA, referencing ICO guidance and a DPIA template, and directs readers to related platform policies covering terms, privacy, and cookies, including AI-related materials. It details hosting, security and privacy threat mitigation, governance approach, and the organizational and technical controls used across the main site, AI experiments, and curriculum API.",{"@graph":14,"@context":72},[15,34,55],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/research-report/","Research & Report",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/dpia-data-protection-impact-assessment-user-guide-for-oaks-platform/627175/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/dpia-data-protection-impact-assessment-user-guide-for-oaks-platform/627175.png","ImageObject",300,407,{"name":42,"@type":43},"Theodore","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-29","2026-10-21",true,{"@type":52,"interactionType":53,"userInteractionCount":30},"InteractionCounter",{"@type":54},"ViewAction",{"@type":56,"mainEntity":57},"FAQPage",[58,64,68],{"name":59,"@type":60,"acceptedAnswer":61},"What is the purpose of this DPIA user guide?","Question",{"text":62,"@type":63},"It helps users carry out a Data Protection Impact Assessment for Oak’s platform to support legal compliance and confidence in the platform’s safety and security.","Answer",{"name":65,"@type":60,"acceptedAnswer":66},"Which related documents should be read alongside the guide?",{"text":67,"@type":63},"Readers should use the guide together with Oak’s Terms and Conditions and policies for Privacy and Cookies across the main site, Aila (AI experiments), and the Curriculum API, plus any other listed platform policy documents.",{"name":69,"@type":60,"acceptedAnswer":70},"How does Oak mitigate security and privacy threats?",{"text":71,"@type":63},"Access to the sites and services passes through Cloudflare, which analyzes traffic for threats and blocks access when a problem is detected, without accessing personal information.","https://schema.org",{"og:url":32,"og:type":74,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":76,"canonical":32},"index,follow",{"doc_id":78,"site_id":7},627175,1792755774,{"code":4,"msg":81,"data":82},"success",[83,87,91,95,100,105,110,114,119,122,126],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":84,"show_sort_weight":85,"slug":86},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":88,"show_sort_weight":89,"slug":90},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":92,"show_sort_weight":93,"slug":94},"Exam",70,"exam",{"id":96,"doc_module":4,"doc_module_name":25,"category_name":97,"show_sort_weight":98,"slug":99},5,"Comic",60,"comic",{"id":101,"doc_module":4,"doc_module_name":25,"category_name":102,"show_sort_weight":103,"slug":104},6,"Technology",50,"technology",{"id":106,"doc_module":4,"doc_module_name":25,"category_name":107,"show_sort_weight":108,"slug":109},7,"Healthcare",40,"healthcare",{"id":111,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":112,"slug":113},8,30,"research-report",{"id":115,"doc_module":4,"doc_module_name":25,"category_name":116,"show_sort_weight":117,"slug":118},9,"Religion & Spirituality",20,"religion-spirituality",{"id":117,"doc_module":4,"doc_module_name":25,"category_name":120,"show_sort_weight":117,"slug":121},"World Cup","world-cup",{"id":123,"doc_module":4,"doc_module_name":25,"category_name":124,"show_sort_weight":123,"slug":125},10,"Lifestyle","lifestyle",{"id":127,"doc_module":4,"doc_module_name":25,"category_name":128,"show_sort_weight":96,"slug":129},19,"General","general",{"code":4,"msg":81,"data":131},{"doc_id":78,"user_id":132,"nickname":42,"user_avatar":133,"doc_module":4,"category_id":111,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":30,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":111,"language":139,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":12,"update_tm":143,"read_time":117},7971461740886,"https://ap-avatar.wpscdn.com/davatar_3d24733baf745e90a7e4bdd5f77d97b2","User guide for completing a Data Protection Impact Assessment on Oak’s platform  \nThis guide will help you carry out a Data Protection Impact Assessment (DPIA) of our platform, so that you can comply with your obligations under data protection laws and be assured that our platform is safe and secure for use by your teachers and others.  \nThe Information Commissioner’s Office (ICO) provides guidance on when and how to complete a DPIA and a DPIA template.  \nRead this guide alongside the policies listed below which set out detailed information about our platform, including Aila, our AI-powered lesson assistant and the personal data we handle.  \nTerms and Conditions ( main site and AI experiments)  \nPrivacy Policy (all sites)  \nCookie Policy ( main site)  \nCookie Policy (Aila site)  \nTerms and Conditions (Curriculum API)  \nCookie Policy (Curriculum API)  \nIf these documents, combined with this guide, do not fully answer any questions you have, [please contact our Data Protection Officer at](please contact our Data Protection Officer at dpo@thenational.academy)[ ](please contact our Data Protection Officer at dpo@thenational.academy)[dpo@thenational.academy](please contact our Data Protection Officer at dpo@thenational.academy), who will be happy to help.  \nInformation about our platform  \nOur main website is [https://www.thenational.academy/](https://www.thenational.academy/. This)[. This](https://www.thenational.academy/. This) is where you can access and download our lesson planning and teaching resources.  \nWe also have the Oak AI Experiments site ([https://labs.thenational.academy/](https://labs.thenational.academy/)). Using a log-in, you can access Aila, our AI-powered lesson assistant.  \nFor third party organisations who want to integrate Oak’s openly licensed curriculum and lesson content, we also have the Oak Curriculum API  \n( [https://open-api.thenational.academy/](https://open-api.thenational.academy/)).  \nInformation you may require to complete your DPIA  \nWho hosts our platform?  \nOur main website:  \n● It is hosted on Vercel in the public cloud.  \n● The following additional tools are used:  \n○ Google Cloud Platform (for hosting and management of the application database and downloadable lesson resources (slides, worksheets, video transcripts, etc.) .  \n○ Google Drive (for hosting the lesson content (slides and worksheets)  \n○ Hasura Cloud (for delivery of data to the site via an API)  \n○ Mux (for hosting and streaming of videos)  \n○ ElasticCloud (for search functionality)  \n○ Sanity CMS (for blog posts and associated content)  \n○ Cloudinary (for hosting and managing lesson media such as images and audio)  \nOur AI Experiments site:  \n● It is hosted on Vercel in the public cloud.  \n● The following additional tools are used:  \n○ Google Cloud Platform (our application databases, which are managed by ScaleGrid)  \n○ Prisma Accelerate (database performance, including connection pooling and query caching)  \n○ Third-party LLM provider, currently OpenAI GPT-5 .4Mini  \nOur Curriculum API and associated website:  \n● It is hosted on Vercel in the public cloud.  \n● The following additional tools are used:  \n○ Google Cloud Platform (for generating and hosting the bulk data assets and collecting assets for certain API endpoints)  \n○ Hasura Cloud (for delivery of data to the Oak Curriculum API, via another API)  \n○ Mux (for hosting static videos)  \n○ Sanity CMS (for API documentation content) .  \nHow do we detect and mitigate security and privacy threats?  \nAll access to our sites and services passes through Cloudflare, which handles approximately 20% of all internet traffic. Cloudflare analyses the traffic to identify threats, attacks, and bad actors, and automatically prevents access when a problem is found. It does not access any personal information.  \nHow do we comply with data protection legislation?  \nAs set out in our Privacy Policy, we stay compliant with relevant legislation by:  \n● Implementing strong security measures:  \n○ W","cbCaiuFvzzKXRApQ","https://ap.wps.com/l/cbCaiuFvzzKXRApQ","pdf",174112,"English","# Completing a DPIA for Oak’s platform\n## Related policies and where to find information\n## Platform overview: hosting and services\n## AI Experiments site: hosting and tools\n## Curriculum API: hosting and tools\n## Detecting and mitigating security and privacy threats\n## Compliance with data protection legislation","[{\"question\":\"What is the purpose of this DPIA user guide?\",\"answer\":\"It helps users carry out a Data Protection Impact Assessment for Oak’s platform to support legal compliance and confidence in the platform’s safety and security.\"},{\"question\":\"Which related documents should be read alongside the guide?\",\"answer\":\"Readers should use the guide together with Oak’s Terms and Conditions and policies for Privacy and Cookies across the main site, Aila (AI experiments), and the Curriculum API, plus any other listed platform policy documents.\"},{\"question\":\"How does Oak mitigate security and privacy threats?\",\"answer\":\"Access to the sites and services passes through Cloudflare, which analyzes traffic for threats and blocks access when a problem is detected, without accessing personal information.\"}]","DPIA Data Protection Impact Assessment - User Guide for Oak’s Platform | PDF",1792548904]