THE UK Information Commissioner’s Office (ICO) has released the report "EdTech examined" which reviews data protection practices among 28 edtech providers throughout 2024 and 2025. The audits highlighted positive information security practices but also revealed compliance issues, including misidentification of data roles, weak contracts with schools, and poor data management principles. The ICO made 596 recommendations, most of which have been adopted.
Future collaboration with the Department for Education aims to establish a new edtech code to enhance data protection for children. The ICO continues to engage with 12 of the edtech providers to ensure compliance improvements.