
About Course
A clear, practical introduction to data protection law for anyone who handles personal information at work, in a charity, school, business or community group. The focus is on real situations, not legal jargon.
Free · About 1 hour · Self-paced · Interactive activities and scenarios throughout
You will learn what counts as personal data, the seven data protection principles, the lawful bases for using data, people’s rights over their information, who is responsible for what, and how to prevent and respond to data breaches.
Which law does this cover?
The course is based on the EU GDPR and the UK GDPR with the Data Protection Act 2018, including the 2025 UK updates. Many countries have similar laws, such as Nigeria, Kenya, South Africa, Ghana, Brazil and Canada. Learners outside the UK and EU should also check their own country’s law and their organisation’s policies.
Your certificate
Pass the final assessment (70%) to receive an IIFAL CPD Certificate. You have up to three attempts. Module knowledge checks have unlimited attempts and no time limit.
This CPD course is designed, quality-assured and certified by IIFAL. It is awareness training, not legal advice.
Course Content
Module 1: Introduction to GDPR and Data Protection Law
Lesson 1.1: What Is Data Protection?
Lesson 1.2: Personal Data
Lesson 1.3: Special Category Data
Lesson 1.4: How the GDPR Is Organised
Module 1 Summary
Module 1 Knowledge Check
Welcome and Course Overview
Module 2: Data Protection Principles and Individual Rights
Module 3: Legal Responsibilities and Compliance
Module 4: Data Security and Breach Management
Module 5: Applying GDPR in Practice
Essential GDPR Awareness – Final Assessment
Earn a certificate
Add this certificate to your resume to demonstrate your skills & increase your chances of getting noticed.

