Estyn's National Thematic Review of Generative AI Data-Protection Practice in Welsh Schools

Estyn (Wales's statutory education inspectorate) conducted a national thematic review titled "A New Era: How Artificial Intelligence (AI) is Supporting Teaching and Learning," visiting 21 primary, secondary, special and all-age schools and surveying staff across all 22 Welsh local authorities during the 2024–2025 school year.

The report, published 9 October 2025, found that while many schools were beginning to explore generative AI for planning, feedback and accessibility, "too many schools... remain unclear of their statutory duties regarding the protection of personal data," with only a minority having robust GDPR-compliant procedures for AI tools.

On 16 October 2025 the Welsh Government issued a written statement in response, committing to co-design a "coherent national approach" with Estyn, the Information Commissioner's Office (ICO) and the Welsh Local Government Association (WLGA); a generative-AI school policy template had separately been made available via Hwb/360 Safe Cymru from May 2025.

This is a diagnostic inspection and a non-binding government response, not enacted regulation: no sanctions were issued, adoption of the May 2025 policy template was uneven, and the promised national framework had not yet been delivered as of the report's publication.

Read the full analysis: https://estyn.gov.wales/improvement-resources/new-era-how-artificial-intelligence-ai-is-supporting-teaching-and-learning/