The Government does not censor or interfere with legal content online. If online content is deemed illegal, it is a matter for law enforcement to investigate.

However, cyber security is a top priority for the Government. We are investing £1.9 billion in the national cyber security strategy and have opened the National Cyber Security Centre which is working with public and private sector organisations to make the UK the safest place for online activity.

All organisations should have good basic cyber security measures in place, such as the Government's Cyber Essentials scheme, which protects against common vulnerabilities, which are widely reported online, and will not be specific to schools. They should also ensure they have appropriate protections in place for sensitive data such as personal details.

As per my answer to PQ 62140, the Department for Education provides guidance to schools on how to protect data including the key principles, obligations and duties in relation to the Data Protection Act. Schools are not required to notify the Department if their website of servers are hacked, but in the event of a suspected serious breach or loss of personal or private information, schools should report the incident to the Information Commissioner’s Office.

Through the Edubase register, the Department for Education is aware of 19,885 schools with websites.

All schools, as independent public bodies, are directly responsible under the Data Protection Act 1998 for the collation, retention, storage and security of all information they produce and hold.

The Department provides guidance to schools on how to protect data including the key principles, obligations and duties in relation to the Data Protection Act. Schools are not required to notify the Department if their website or servers are hacked, but in the event of a suspected serious breach or loss of personal or private information, schools should report the incident to the Information Commissioner’s Office.

Through the Edubase register, the Department for Education is aware of 19,885 schools with websites.

All schools, as independent public bodies, are directly responsible under the Data Protection Act 1998 for the collation, retention, storage and security of all information they produce and hold.

The Department provides guidance to schools on how to protect data including the key principles, obligations and duties in relation to the Data Protection Act. Schools are not required to notify the Department if their website or servers are hacked, but in the event of a suspected serious breach or loss of personal or private information, schools should report the incident to the Information Commissioner’s Office.