Online Data Protection

3 hours

Self-paced Online

Beginner to Intermediate

5 credits

CPD Certificate of Completion

£15

Buy as a gift

A practical grounding in UK data protection. Learn what personal data is, which lawful basis applies, how to handle rights requests, and what to do when a breach happens, including changes from the Data (Use and Access) Act 2025.

At a Glance

Who It's For

Suitable for education staff handling, sharing, or storing personal data across roles and departments.

Flexible Learning

Complete your training online anytime, anywhere, at your own pace.

Certificate

Achieve 80% to earn your CPD Certificate of Completion

Study Methods

Online

Dedicated Support

support@educateu.com

Assessment

Multiple-choice questions (MCQs) - 80% pass mark required

HR teams: handle staff records, fit notes and references in line with the UK GDPR.
Admissions and student services staff: respond safely to requests from parents, landlords and agents, and share only what is permitted.
Lecturers and tutors: protect marks, wellbeing notes and support details, and report mistakes straight away.
Researchers: apply the correct lawful basis and safeguards to research data.
IT teams: manage access, handle mailbox requests through the formal process and spot potential breaches.
Managers: support staff who report a breach and make sure it is escalated immediately.

Instant access the moment you enrol
Self-paced online modules. Learn at your own speed, on any internet-enabled device
Module by module multiple-choice quizzes to consolidate understanding
Content reflecting the Data (Use and Access) Act 2025 and its staged commencement
CPD Certificate of Completion on successfully passing the final assessment

How to define personal data, special category data and criminal offence data, and recognise each in organisational records
What the Data Protection Act and the UK GDPR each do, and how leaving the EU has changed them
What the Data (Use and Access) Act 2025 changes, and what it leaves unchanged
How to apply the seven principles of Article 5 to your own handling of personal data
How to recognise a personal data breach, take the correct action in the first hour, and apply the 72 hour reporting rule
When a Data Protection Impact Assessment is required, and what must be in place before sharing personal data
The penalties for non-compliance and the role of the regulator
The organisational and technical security measures expected of your role

Course Certificate

Achieve 80% to earn your CPD Certificate of Completion

Course Content

A module-by-module breakdown of what you’ll learn in this course.

Introduction to Data Protection

Processing Data

Rights and Freedoms

Responsibilities for Data Protection

Frequently Asked Questions

You will have access to your course for one year from the date of enrolment.

Yes. Module 4 covers what counts as a personal data breach and what to do in the first hour. It explains the 72-hour rule: a reportable breach must be reported to the regulator without undue delay and, where feasible, within 72 hours of becoming aware of it. Staff also work through realistic breach scenarios so they know to report a suspected breach straight away.

Yes. Module 1 explains what the Data (Use and Access) Act 2025 changes, what it leaves unchanged and how it is being brought in over stages. The Act amends the UK GDPR and the Data Protection Act 2018 rather than replacing them. Module 3 covers what it changes for rights requests, automated decisions and complaints.

Choose your course, complete the enrolment process, and submit any required information. After confirmation, you will receive access details to start your learning journey.

Learners need 80% or more in the final multiple-choice assessment to pass. Each module’s knowledge check can be retaken before the learner moves on.