Certified GDPR Foundation Training Course

• Module 1 – Legislation, subject matter, scope and definitions. How the UK GDPR and the Data Protection Act 2018 work together, what data and organisations the Regulation covers, and the core definitions used throughout: data subject, personal data, processing, controller and processor.
• Module 2 – Data processing principles. The six data processing principles, the accountability principle, lawful bases for processing, and the additional safeguards required for special category data such as health data.
• Module 3 – Rights of data subjects. The eight individual rights under the Regulation, including the right to be informed, right of access, right to erasure and right to object, plus how to handle a data subject access request.
• Module 4 – Controller and processor. Core obligations including data protection by design, contracts between controllers and processors, records of processing, breach notification, data protection impact assessments, and when a data protection officer is required.
• Module 5 – International data transfers. The conditions for transferring personal data outside the UK, including adequacy decisions and safeguarding mechanisms such as standard contractual clauses.
• Module 6 – The Information Commissioner’s Office. The ICO’s powers and role in providing guidance and enforcement.
• Module 7 – Remedies, liabilities and penalties. Data subjects’ rights to complain and seek compensation, and the two-tier fine structure under the Regulation.

Course statistics