How this hub helps your teams
Reduce the risk of breaches and ensure knowledge translates into action with training that's relevant to each role.
-
Senior Leaders and Board Members:
Strengthen oversight with clear visibility of staff understanding and training, helping demonstrate that data protection is embedded across the organisation. - Compliance, Legal, and Data Protection teams:
Identify knowledge gaps and strengthen data protection controls with expert training that helps embed good data-handling practices and demonstrate compliance.
- All Employees handling personal data:
Build the confidence to handle personal data responsibly, recognise risks and respond appropriately to potential breaches with training relevant to day-to-day role of staff.
PCI Data Security Standard Compliance Training Course
Card data breaches carry consequences that sit outside the usual regulatory route: fines from the card schemes, forensic investigation costs, and in serious cases the loss of the ability to take card payments at all. Most failures trace back to routine handling rather than sophisticated attack. Training the people closest to the data closes the gap that technical controls alone leave open.
Data Protection Compliance Training Course
Most reportable breaches come from ordinary mistakes: an email to the wrong recipient, a file left accessible, a request nobody recognised. The seventy-two hour reporting clock does not care how the breach happened. Annual data protection training across all staff is both a practical control and the baseline the ICO expects to see when it assesses whether an organisation took its obligations seriously.
_ID.webp?)
General Data Protection Regulation (GDPR)
GDPR follows the data rather than the organisation, so entities outside the EU are frequently in scope without realising it. Fines are calculated on group turnover. Consistent training across every location gives a multinational a single standard to defend, and it satisfies the accountability principle that requires organisations to show their compliance rather than assert it.
Data Protection
Breaches come from routine actions rather than sophisticated attacks, and careful habits slip within months of training. The seventy-two hour reporting clock does not allow for hesitation about whether something counts. A short annual refresher across all staff is proportionate to the risk and forms part of the accountability evidence the ICO expects an organisation to be able to produce.
-E.webp?)
Privacy and Electronic Communications Regulations (PECR)
PECR governs marketing calls, emails, texts and cookies, and its consent standards are stricter than the general position under data protection law. Enforcement has been consistent and the fines are directed at the organisation rather than the platform. Training marketing and customer contact teams keeps campaigns lawful before they are sent rather than after a complaint reaches the ICO.
Legitimate Interest Assessments
Legitimate interests is chosen because it looks flexible, then relied on without the assessment that makes it valid. An LIA produced after a complaint carries very little weight. Training the people who decide how data will be used means the assessment happens before processing starts, which is the only point at which it can influence the design.
Understanding the GDPR
The General Data Protection Regulation (GDPR) sets out key principles for handling personal data and protecting individuals' rights. This training helps employees understand GDPR requirements, their responsibilities in processing data and how to prevent data breaches that could lead to reputational and financial consequences.
Personal Data Breaches
Personal data breaches can occur through hacking, human error or unauthorised access, leading to serious legal and reputational consequences. This training helps employees understand the risks of data breaches, the importance of reporting incidents promptly and best practices to protect personal data.
Data Protection Impact Assessments
Data Protection Impact Assessments (DPIAs) are used to evaluate our data processing activities and mitigate risks to individuals. This training outlines the steps, requirements and considerations for conducting DPIAs.
Controllers and Processors
The differences between data controllers and data processors are crucial to understanding data protection obligations. This training outlines their definitions, responsibilities and compliance requirements.
Special Category Data
In many workplaces, sensitive data, including special category data, is collected and requires extra care. This training explains how to handle such data.
GDPR Principle 1
The first principle of the GDPR requires that personal data must be processed lawfully, fairly and transparently. This training helps employees understand the importance of identifying a lawful basis for data processing, ensuring fairness in data use and maintaining transparency with individuals about how their data is handled.
GDPR Principle 2
The second principle of the GDPR, purpose limitation, requires that personal data be collected for specified, explicit and legitimate purposes. This training helps employees understand the importance of defining clear purposes for data collection, preventing function creep and ensuring compliance when repurposing data.
GDPR Principle 3
The third principle of the GDPR, data minimisation, requires that personal data collected must be adequate, relevant and limited to what is necessary. This training helps employees understand the importance of collecting only essential data, ensuring its relevance and regularly reviewing stored information to maintain compliance.
GDPR Principle 4
The fourth principle of the GDPR, accuracy, requires that personal data must be correct, up to date and not misleading. This training helps employees understand the importance of maintaining accurate records, verifying data when necessary and promptly correcting any errors.
GDPR Principle 5
The fifth principle of the GDPR, storage limitation, requires that personal data be retained only for as long as necessary for its intended purpose. This training helps employees understand the importance of data retention policies, lawful reasons for keeping data and when to securely delete or anonymise information.
GDPR Principle 6
The sixth principle of the GDPR, integrity and confidentiality, requires that personal data be protected against unauthorised access, loss or damage. This training helps employees understand the importance of physical and cybersecurity measures in safeguarding personal data and ensuring its accuracy, confidentiality and availability.
GDPR Principle 7
The seventh principle of the GDPR, accountability, requires organisations to take responsibility for compliance and demonstrate good governance in data protection. This training helps employees understand their role in ensuring compliance, maintaining records and implementing safeguards to protect personal data.
GDPR and Consent
Consent is one of the six lawful bases for processing personal data under the GDPR, requiring individuals to give clear, informed and voluntary agreement. This training helps employees understand when consent is necessary, how to obtain it properly and the rights of individuals to withdraw it.
GDPR Lawful Bases for Processing
The General Data Protection Regulation (GDPR) requires organisations to have a lawful basis for processing personal data, chosen from six legal grounds. This training helps employees understand when and how to select the appropriate basis for data processing while ensuring compliance with data protection laws.
GDPR Legitimate Interests
Legitimate interests is a flexible lawful basis for processing personal data, but it requires balancing business needs with individuals' rights. This training helps employees understand when legitimate interests can be used, how to assess its appropriateness and the importance of conducting impact assessments.
GDPR International Transfers
The international transfer of personal data is restricted to ensure individuals' privacy rights are protected when data is sent abroad. This training helps employees understand the conditions for lawful data transfers, including adequacy regulations, safeguards and exceptions.
GDPR Individual Rights
The General Data Protection Regulation (GDPR) grants individuals eight specific rights over their personal data, ensuring transparency and control. This training helps employees understand these rights, their obligations in responding to requests and the importance of GDPR compliance.
GDPR Subject Access Requests
Individuals have the right to access their personal data and organisations must respond to subject access requests (SARs) within legal timeframes. This training helps employees understand how to recognise, verify and process SARs correctly while ensuring compliance with data protection laws.