About the learning programme
These materials are designed to help non-technical staff to appreciate that everyone has a role to play in looking after personal information and ensuring that the organisation is compliant with the General Data Protection Regulations that form part of the 2018 Data Protection Act
The data protection capability of an organisation is only as strong as its weakest link, and experience shows that the staff are generally the weakest link.
To get the most from this learning programme you will need to allow time to complete the activities and to reflect on your own practice, but it is divided into sections so that you can complete it in a number of sessions.
By the end, you should be able to demonstrate what you learnt going forward in changes to your behaviours. There is a scenario-based assessment at the end of the programme. If you complete the programme successfully, you will obtain a certificate of completion.

Contents of the programme
- Principles of data protection
- Legal bases for processing
- Special categories of personal information and data subject rights
- Keeping information secure
Click on the first unit to start your learning, or if you are returning, then click on a later topic


