5.00
(1 Rating)

Essential GDPR Awareness

Wishlist Share

About Course

A clear, practical introduction to data protection law for anyone who handles personal information at work, in a charity, school, business or community group. The focus is on real situations, not legal jargon.

Free · About 1 hour · Self-paced · Interactive activities and scenarios throughout

You will learn what counts as personal data, the seven data protection principles, the lawful bases for using data, people’s rights over their information, who is responsible for what, and how to prevent and respond to data breaches.

Which law does this cover?

The course is based on the EU GDPR and the UK GDPR with the Data Protection Act 2018, including the 2025 UK updates. Many countries have similar laws, such as Nigeria, Kenya, South Africa, Ghana, Brazil and Canada. Learners outside the UK and EU should also check their own country’s law and their organisation’s policies.

Your certificate

Pass the final assessment (70%) to receive an IIFAL CPD Certificate. You have up to three attempts. Module knowledge checks have unlimited attempts and no time limit.

This CPD course is designed, quality-assured and certified by IIFAL. It is awareness training, not legal advice.

Show More

What Will You Learn?

  • Explain what personal data and special category data are
  • Describe the seven data protection principles
  • Identify the lawful bases for using personal data
  • Recognise people's rights and respond to common requests
  • Distinguish between a controller and a processor
  • Prevent, recognise and respond to a personal data breach

Course Content

Module 1: Introduction to GDPR and Data Protection Law
This module introduces GDPR, its purpose, and how it relates to wider data protection legislation.

  • Lesson 1.1: What Is Data Protection?
  • Lesson 1.2: Personal Data
  • Lesson 1.3: Special Category Data
  • Lesson 1.4: How the GDPR Is Organised
  • Module 1 Summary
  • Module 1 Knowledge Check
  • Welcome and Course Overview

Module 2: Data Protection Principles and Individual Rights
This module explores the core principles that govern data protection and explains the rights of individuals.

Module 3: Legal Responsibilities and Compliance
This module focuses on the legal responsibilities that organisations and individuals must follow when handling personal data. GDPR is not only about understanding data protection principles—it also requires clear accountability in how data is managed, protected, and used in everyday operations.Every organisation that processes personal data must understand its role, responsibilities, and legal duties to remain compliant and avoid serious penalties.

Module 4: Data Security and Breach Management
OverviewData security and breach management are critical components of GDPR compliance. This module focuses on how personal data can be protected in everyday practice and what actions must be taken when something goes wrong.Even with strong policies in place, no system is completely risk-free. For this reason, organisations must not only focus on prevention but also on having clear procedures for responding to security incidents quickly and effectively.

Module 5: Applying GDPR in Practice
This final module focuses on how GDPR is applied in real working environments. While previous modules explain the law, principles, and responsibilities, this section brings everything together into practical everyday actions.Understanding GDPR in theory is important, but real compliance depends on how people behave in actual workplace situations. This includes how data is handled, how decisions are made, and how mistakes are prevented or corrected.

Essential GDPR Awareness – Final Assessment
This final assessment evaluates your understanding of the key principles, responsibilities, and practical application of the General Data Protection Regulation (GDPR). It is designed to test both theoretical knowledge and real-world understanding of how personal data should be collected, processed, stored, and protected in line with legal requirements.You will be assessed on your knowledge of data protection principles, personal and special category data, individual rights, lawful processing, organisational responsibilities, and data security practices. The assessment also includes scenario-based questions to measure your ability to apply GDPR in workplace situations.This is a summative assessment covering all modules of the course:Data protection fundamentals and definitions Personal data and special category data GDPR Articles, Recitals, and legal structure Roles, responsibilities, and compliance requirements Data security and breach management Practical application in real-world contextsThe assessment is designed to ensure you can confidently demonstrate understanding of GDPR principles and apply them appropriately in professional environments.Upon successful completion, learners will have demonstrated competence in essential GDPR awareness and compliance readiness for workplace practice.

Earn a certificate

Add this certificate to your resume to demonstrate your skills & increase your chances of getting noticed.

selected template

Student Ratings & Reviews

5.0
Total 1 Rating
5
1 Rating
4
0 Rating
3
0 Rating
2
0 Rating
1
0 Rating
AM
2 years ago
5 Stars

Want to receive push notifications for all major on-site activities?

✕