Back to school 2026: key legal and regulatory priorities for independent schools

Safeguarding: a particularly busy September

The final version of Keeping Children Safe in Education (KCSIE) 2026 was published on 1 September 2026. Although it is largely consistent with the 'for information' version published over the summer, it contains some additional changes, including updates to the definition and indicators of sexual abuse, revised content on racism and prejudice-based harm and the need to consider the impact within safeguarding practice where appropriate, and a clarification of safer recruitment requirements in EYFS provision.

As ever, there are updated references, revised terminology and new expectations to get to grips with. Many of the terminology changes are intended to align KCSIE more closely with the 2026 version of Working Together to Safeguard Children, including references to Family Help and updated safeguarding definitions. Schools should ensure that safeguarding policies, training materials and internal procedures use terminology consistently and reflect the final September version.

One of the most immediate changes is the removal of the former condensed version of Part One at Annex A. All staff must now read Part One in full, including those who do not work directly with children. Schools should ensure that induction and September safeguarding training arrangements reflect this.

KCSIE now also includes guidance on children questioning their gender. It does not create any new legal obligations but re-states the legal position in one accessible place. Social transition is expressly treated as an active intervention which should be considered through a safeguarding lens. Schools should not initiate social transition; parents should ordinarily be involved unless doing so would create a safeguarding risk; and decisions should be subject to appropriate DSL oversight and properly recorded. The guidance also addresses single-sex toilets, changing facilities, boarding accommodation and sport.

There is also an important safer recruitment change: from 1 September, the previous supervision exemption from regulated activity with children is removed. Schools using volunteers should therefore review existing arrangements and their approach to DBS and barred-list checks. In addition, KCSIE now makes clear that, where a school is also subject to the EYFS framework, staff and volunteers must not begin work within the EYFS setting until the school has received their enhanced DBS certificate, including barred list information.

Other changes include strengthened expectations around filtering and monitoring, mental health, violence against women and girls, serious violence, harmful sexual behaviour, online safety and generative AI. The final version also updates the definition of sexual abuse to mirror Working Together to Safeguard Children and reinforces that children may experience prejudice-based harm, including racism, faith-based prejudice and other forms of discrimination, which should be considered within safeguarding practice where appropriate.

Alongside KCSIE, the updated Working Together to Safeguard Children introduces the Family Help model as part of the Families First Partnership programme. Family Help is intended to bring targeted early help and section 17 support together into a more seamless offer for families, with greater continuity of practitioner relationships. Schools should understand how these arrangements are being implemented locally and what role school staff may be expected to play.

For schools with EYFS provision, the revised statutory framework introduces detailed safer-sleep requirements, new expectations around screen use and a prohibition on providing childcare where banned dog breeds are present. There is also an important change to Ofsted notification requirements: the threshold for relevant allegations involving those living, working or looking after children on the premises changes from allegations of “serious harm” to “harm”.

RSHE

Revised statutory Relationships Education and RSE guidance also applies from 1 September. Among other things, it strengthens content concerning sexual harassment and violence, consent, pornography and online harms, criminal exploitation and healthy relationships.

There is also a stronger emphasis on parental engagement and transparency. Schools should not simply publish their policy: parents should understand what is being taught and have appropriate opportunities to engage with curriculum content and teaching materials. Schools should also review resources and arrangements with external providers.

Independent schools should remember that the statutory Health Education requirements do not apply to them in the same way as they do to state-funded schools; the health element continues to be delivered through broader PSHE provision under the Independent School Standards.

Attendance, behaviour and mobile phones

The statutory attendance guidance was updated in July. One particularly important clarification is that schools should take the register at the same time for all registered pupils. Schools operating different registration times for different year or age groups should therefore review their arrangements. There is also strengthened material on attendance analysis, illness and medical evidence, remote education, leave of absence and attendance coding.

The DfE has also published a useful package of resources on communicating with parents about school attendance, including practical guidance, template communications and resources that schools can share with families. Most recently, it has added a Back-to-School Reset Guide, which provides practical advice for parents and carers on helping children prepare for the return to school. As schools should be reminding parents of their attendance expectations at the start of the academic year, this is a useful resource to consider signposting or sharing alongside those communications.

New requirements around restrictive interventions have already been in force since April. Schools must record significant uses of force and incidents of seclusion or non-force-related restraint and have arrangements for informing parents. The wider guidance also places greater emphasis on prevention, de-escalation, pupils with SEND, post-incident support and analysing incident data for patterns and disproportionate impact.

From September, schools should also be following the DfE's statutory mobile phones guidance. The Government's expectation is that schools should be mobile phone-free by default throughout the school day. Although pupils are not prohibited from bringing phones onto site, the guidance focuses on preventing access and use during the school day. Schools retaining a “not seen, not heard” approach should consider carefully whether their arrangements can be reconciled with that expectation.

Allergy safety and school security

While the DfE's new allergy safety guidance is not currently statutory for independent schools, it is good practice and the Government intends to introduce equivalent requirements through the Independent School Standards. Independent schools should therefore consider benchmarking their existing arrangements against it now.

The guidance envisages a standalone allergy safety policy, appropriate staff training, robust arrangements for identifying and managing allergy risks, Individual Healthcare Plans where appropriate, access to medication and spare adrenaline auto-injectors, and systems for learning from serious incidents and near misses.

Schools should also be reviewing their premises' security arrangements and preparing for the implementation of the Terrorism (Protection of Premises) Act 2025 which is expected next year.

Complaints: new data protection requirements

Since 19 June 2026, section 164A of the Data Protection Act 2018 has required schools to facilitate the making of data protection complaints, acknowledge them within 30 calendar days and take appropriate steps to investigate and respond without undue delay.

For independent schools, the practical challenge is how this interacts with the three-stage parental complaints process required by Part 7 of the Independent School Standards. Schools do not necessarily need a wholly separate process for every data protection issue, nor should every straightforward data protection complaint automatically be put through an unnecessarily elaborate three-stage procedure. Correct categorisation and flexibility are key. Schools should consider having a section 164A-compliant parental complaints procedure alongside a shorter standalone route which can be used where appropriate. Privacy notices should also explain the right to make a data protection complaint.

The increasing use of AI to produce complaints and information requests reinforces a related practical point: focus on the substance, not the apparent sophistication or length of the correspondence. AI-generated material may contain inaccurate or irrelevant legal references, and a lengthy complaint does not necessarily require an equally lengthy response.

Inspection: implementation matters as much as policy

The DfE's updated guidance on the Independent School Standards reinforces a recurring theme: schools need to be able to demonstrate compliance in practice.

For example, the guidance provides further detail about the active promotion of fundamental British values. Promotion should be planned and embedded across the curriculum and wider life of the school rather than demonstrated through isolated activities.

Our analysis of 153 routine ISI inspections during 2025/26 found that 85% of schools met all the Standards. Of those which did not, every school with an unmet Standard also failed Part 8 on leadership and management. Recurring difficulties included safeguarding practice and oversight, risk assessment, safer recruitment and SCR administration, and attendance.

That provides a useful lesson for September: updating a policy is only the beginning. Schools should be confident that changes have been communicated, staff understand what is expected, procedures match the policy and leaders and proprietors have appropriate mechanisms for assurance and oversight.

What should independent schools prioritise now?

With so much change, the most useful exercise is to distinguish between what requires action now, what requires preparation, and what simply needs to remain on the radar.

For September, schools should prioritise final KCSIE implementation and training; review RSHE and EYFS arrangements where applicable; check attendance and mobile-phone arrangements; ensure the new restrictive-intervention requirements are embedded; review data protection complaints processes; and make sure policies, operational practice and governance oversight tell the same story.

Longer-term developments, including SEND reform, the independent educational institution provisions in the Children's Wellbeing and Schools Act 2026 and the forthcoming mandatory reporting duty for child sexual abuse, should continue to be monitored as further detail emerges.

The key message for the new academic year is therefore not simply “have we updated our policies?” but “can we demonstrate that the changes are understood, implemented and working in practice?”

There are also a number of important employment law developments taking effect over the coming months. Schools can keep track of the changes through our Employment Rights Act tracker and join us for our Employment Law Update for Independent Schools in October 2026, where our Employment team will consider the latest developments and what they mean in practice for independent schools.

If you missed our Back to School webinar, you can catch up on the key developments and practical takeaways by accessing the slides here.