About this course
Everyone who handles personal data needs to understand their responsibilities. This course explains UK GDPR and the Data Protection Act 2018 in plain English, and what they mean day to day.
It covers the data protection principles, lawful bases, individual rights, and how to recognise and report a personal data breach quickly.
What learners cover
- The UK GDPR principles and the role of the ICO
- What counts as personal and special category data
- Lawful bases for processing and the role of consent
- Individual rights, including subject access requests
- Data security in everyday work: email, devices and sharing
- Recognising a personal data breach and the 72-hour reporting duty
Course content
The course is delivered in short, bite-size sections that learners can stop and restart at any point.
- Section 1
The framework
UK GDPR, the Data Protection Act 2018, controllers, processors and the ICO.
- Section 2
Principles and lawful bases
The data protection principles and choosing the right lawful basis for processing.
- Section 3
Individual rights
Access, rectification, erasure, portability and objection, and how to respond.
- Section 4
Breaches and security
Everyday data security habits, recognising a breach and reporting it in time.
Who it is for
All employees who handle personal data, including administrators, HR, marketing, care and customer-facing teams.
Entry requirements: None. Suitable for all staff.
How it is delivered
Fully online and self-paced
Learners work through the course at their own pace and can pause and resume where they left off.
Any device
Works on desktop, laptop, tablet and mobile, with audio, video and written transcripts throughout.
Interactive throughout
Scenarios, exercises and images keep learners engaged rather than clicking through slides.
Knowledge checks
Short checks at the end of each section so learners can see what has landed before moving on.
Average completion time is around 45 mins, though learners can take as long as they need and return as often as they like.
How it is assessed
Knowledge checks run throughout the course so learners can test understanding as they go. The course finishes with a multiple-choice assessment taken online at the end. Learners who do not pass first time can retake the assessment.
Certification
Learners receive a Highfield Online Training digital certificate as soon as they pass the end-of-course assessment. Certificates are downloadable straight away and can be saved to a CPD log or staff training record.
Refresher guidance: Most employers refresh this training every 12 months, or sooner if legislation, roles or workplace risks change.
How it works for teams
- 1. Choose how many licences you need and pay by card, or request an invoice.
- 2. Add your learners' names and email addresses.
- 3. We set them up on the course platform and they receive their login by email.
- 4. Track who has been set up from your account.