45 minutes · free · certificate valid 1 year

GDPR Foundations

Understand the UK GDPR and the Data Protection Act 2018: what personal data is, the seven principles, the eight rights of individuals, and the six lawful bases for processing. Finish the final assessment with a score of 75% or higher to earn a certificate, valid for one year.

Done this course before, or already know the material? You can go straight to the final assessment and renew your certificate without re-reading the lessons.

Who it's for: Anyone in a UK organisation who handles personal data as part of their day-to-day work, from front-line staff to team leaders and managers.

What you'll learn

• Explain what the UK GDPR and the Data Protection Act 2018 require of your organisation.
• Identify personal data and special category data in everyday work situations.
• Apply the seven data protection principles to how you collect, use, and store information.
• Recognise a rights request, such as a Subject Access Request, and know the deadline for responding.
• Choose the most appropriate lawful basis for a given processing activity.

What you'll cover

1. 1

   Overview of GDPR

   What UK GDPR is, who it applies to, and the core definitions everything else builds on.

2. 2

   Principles

   The seven principles that every processing activity must follow.

3. 3

   Rights of the individual

   The eight rights UK GDPR gives to data subjects, and what they mean in practice.

4. 4

   Legal bases for processing

   The six lawful bases, and the extra conditions that apply to special category data.

5. 5

   Putting it into practice

   Short workplace scenarios that test how you would apply this course in real situations.

6. 6

   Final assessment

   20 questions drawn at random from the full question bank. Score 75% or higher to earn your certificate.