CPD Standards Office accreditedData Protection Training
Go beyond the basics. Learn to handle subject access requests, breaches, complaints and data sharing the way UK law expects.
Accredited CPD activityThe CPD Standards Office, provider 51289. Verify accreditation
14-day money back · Pay once, no subscription
Data Protection Training
You can do data protection training online in the UK with Lift College. Data Protection Training is 2 hours of learning in 6 short modules, each with a knowledge check, for £19.99, pay once. Your accredited CPD certificate is ready the same day you pass. We recommend a refresh every 12 months, and the refresher is free.
When a subject access request lands, a breach happens or another organisation asks for records, someone has to decide what to do. Deadlines are short and the rules changed in 2026. Getting it wrong can harm people and damage trust in your organisation.
This course is for the people who make those decisions. It covers lawful bases, special category data, subject access requests, breach reporting, complaints and data sharing. It explains what the Data (Use and Access) Act 2025 changed. You finish knowing the steps, the time limits and when to escalate.
- Choose the right lawful basis, including recognised legitimate interests
- Identify special category data and the extra condition it needs
- Handle a subject access request within the legal time limit
- Assess a personal data breach and decide whether to report it
- Run a data protection complaints process that meets the 2026 rules
- Share personal data safely with other organisations
- Explain the main changes made by the Data (Use and Access) Act 2025
6 short modules, 2 hours in total.
Lawful bases and special data
The seven lawful bases, including the new recognised legitimate interests basis. Why special category data needs a lawful basis and a separate condition.
Knowledge checkHandling subject access requests
Spotting a request in any form, the one-month time limit and when it can be extended. Pausing the clock for clarification or ID, and making a reasonable and proportionate search.
Knowledge checkManaging a personal data breach
Containing a breach, assessing the risk and reporting to the ICO within 72 hours when required. Telling the people affected and recording every breach.
Knowledge checkHandling data protection complaints
The duty that began on 19 June 2026. Helping people complain, acknowledging within 30 days and responding without undue delay.
Knowledge checkSharing data safely
Sharing with partners, suppliers and public bodies. Using the ICO data sharing code, checking your lawful basis and keeping clear records.
Knowledge checkWhat changed in 2026
The Data (Use and Access) Act 2025 changes that began on 5 February 2026, including automated decisions, cookies and international transfers.
Knowledge checkFinal test and your certificate
Multiple choice, 80% to pass, unlimited attempts. Your CPD Standards Office accredited certificate is issued the day you pass.
This course is for you if
- You manage a team that handles customer, patient, pupil or staff records
- You are the person who receives subject access requests or complaints
- You work in HR, practice management, school business management or operations
- You have been named as the data protection lead in a small organisation
- You decide whether to share records with partners, councils or suppliers
- You have done GDPR basics and need the deeper management view
Your CPD accredited certificate, issued the day you pass.
Your certificate names Data Protection Training and shows 2 hours of learning. It also shows your completion date and a recommended refresh date 12 months later.
- One price, £19.99. One payment, one learner, no subscription.
- Short modules with a knowledge check after each one and a final test. Instant results.
- 80% to pass, with unlimited free retakes.
- A CPD accredited certificate as a PDF the same day you pass, carrying the CPD Standards Office mark, our provider number 51289, a unique number and a verification link.
- Access for as long as Lift College offers the course, and never less than 3 years from the day you buy.
- A free refresher when your recommended refresh date arrives. Changed your mind? Ask within 14 days of paying and we refund you in full.
LC-CPD-SAMPLECertificate numberAccredited continuing professional developmentCertificate of CompletionThis is to certify thatAlex Johnsonhas successfully completed the CPD course
Dr Kate StrohmManaging Director, Lift CollegeSample certificateAn example only. It has no numberand cannot be verified.LC-CPD-SAMPLELift College Limited is a CPD Standards Office accredited provider (number 51289). This course is an accredited CPD activity.This certificate confirms completion of a Continuing Professional Development (CPD) course. It is not an Ofqual-regulated qualification.Lift College Ltd · Registered in England and Wales, Company No. 17337303 · Unit 3 E/F Suffolk House Business Park, Ashwells Road, Brentwood, Essex, CM15 9SG · liftcollege.co.ukA sample. Yours carries your name, the date you pass and a unique certificate number with a QR code anyone can scan to check it, or check a certificate at liftcollege.co.uk/verify.
Which online data protection certificate do employers accept?
Your employer decides the data protection training each role needs, based on its own assessment of the personal data you handle and the decisions you make. A good certificate records the course, the hours of learning, the completion date and a refresh date, and it can be verified. The content should follow the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025, including the complaints duty that began on 19 June 2026. Training should also be refreshed on schedule. Lift College's course and certificate do each of these. The certificate records 2 hours of learning, your completion date and a recommended refresh-by date, with a unique certificate number and a verification link, and the refresher every 12 months is free. Comparing providers? See our guide to data protection training online in the UK.
Free or paid? Read our guide to free vs paid GDPR training online.
The law this course supports
UK General Data Protection Regulation (UK GDPR)
Sets the lawful bases, people's rights, breach reporting rules and the accountability principle. Controllers must report notifiable breaches to the ICO within 72 hours of becoming aware of them.
Read the legislation →Data Protection Act 2018
Sits alongside the UK GDPR, adds conditions for special category and criminal offence data, and sets out the Information Commissioner's powers. Since 19 June 2026 it also requires controllers to handle data protection complaints.
Read the legislation →Data (Use and Access) Act 2025
Amended UK data protection law. Most changes began on 5 February 2026, including recognised legitimate interests and reasonable and proportionate searches for subject access requests.
Read the legislation →£19.99. Pay once, nothing added.
One payment for one learner. You keep access for as long as Lift College offers the course, and never less than 3 years. Changed your mind? Ask within 14 days and we refund you in full.
- PaySecure card payment, one time only.
- Sign inYour learner account is ready straight away.
- StartBegin module 1 the same minute.
Free refresher when it is due
We recommend a refresh every 12 months. We email you 30 days before, and from the refresh date you can retake the latest version free and download a new certificate.
How the cost compares
High Speed Training and CPD Online College charge £28.80 to £31.20 for the course. Lift College is £19.99, pay once.
| Provider | Course fee | How you pay |
|---|---|---|
| Lift College Lowest cost to start | £19.99pay once | Pay once, no subscription. Training a team? £16.99 a course on a free organisation account |
| High Speed Training | £31.20 | £31.20 |
| CPD Online College | £28.80 | £28.80 |
Prices as shown on each provider's own website.
Buying Data Protection Training for a team?
Open a free organisation account, buy places and give each person their own login. The price falls the more places you buy.
Multiple enrolment discounts
The price of a place is set by the places in one order, on this course or any mix of our CPD courses. Saving against the £19.99 single place.
| Places in one order | Price a place | Saving |
|---|---|---|
| 1 to 9 places | £16.99 | 15% off |
| 10 to 49 | £14.99 | 25% off |
| 50 to 99 | £12.99 | 35% off |
| 100 to 249 | £10.99 | 45% off |
| 250 or more | £9.99 | 50% off |
What would your team cost?
Training each person on several courses? A sector pack or the annual plan can cost less. Your quote compares all three for you.
Prefer to talk first? Request a call back
- 1
Your own training portal in 2 minutes
Open a free account with your work email. No sales call, and no minimum order.
- 2
See where everyone stands
A progress dashboard, a training matrix and an Excel progress report for your records.
- 3
Reminders sent for you
Welcome emails, nudges for anyone who stalls, and refresher dates so nobody goes out of date.
- 4
Pay by card or invoice
Card, or invoice on 30-day terms with your PO. Places stay valid for 3 years.
- 5
A human tutor with every course
Real tutor support for your staff, unlimited free retakes and a certificate the day they pass.
- 6
Accredited by the CPD Standards Office
Provider 51289. Every CPD course is an accredited CPD activity.
Check any learner's certificate in our register →
What our learners say
Stories from Lift College learners on our qualifications, in their own words.
“I had been a care assistant for four years without a formal qualification. Lift College made the whole process straightforward, my assessor visited regularly and I completed my Level 3 Diploma in Adult Care in just over a year. I was promoted to senior care worker the month after I qualified.”
“My employer was clear, I needed GCSE English to move into a supervisory role. Lift College helped me find the right exam board and an exam centre five minutes from home. Passed grade 4. Got the promotion.”
“My employer needed me to have Level 2 maths before they could register me on the Level 3 apprenticeship programme. Lift College was fast, the tutor was brilliant, and I resit my maths once after a near-miss and passed the second time. The whole thing took twelve weeks.”
Questions about Data Protection Training
How long do we have to respond to a subject access request?
One month from receipt. You can extend by up to two further months if the request is complex or you have several from the same person. Asking for clarification or ID pauses the clock.
Is this course CPD accredited?
Yes. Data Protection Training is an accredited CPD activity with the CPD Standards Office, the UK's research-led CPD accreditation body. Lift College Limited is a CPD Standards Office accredited provider (provider number 51289), and your certificate carries the CPD Standards Office mark and our provider number so an employer or professional body can check it.
When must a data breach be reported to the ICO?
Without undue delay and within 72 hours of becoming aware of it, unless it is unlikely to result in a risk to people. If there is a high risk, you must also tell the people affected.
What is the new data protection complaints rule?
Since 19 June 2026, organisations must help people make data protection complaints. You must acknowledge a complaint within 30 days and respond without undue delay. The course shows you how to set this up.
What is a recognised legitimate interest?
It is a lawful basis added by the Data (Use and Access) Act 2025. It covers set purposes, such as safeguarding vulnerable people or responding to emergencies, without the usual balancing test. It is a CPD Standards Office accredited certificate (provider number 51289).
How is this different from GDPR Training?
GDPR Training is everyday data handling for all staff. Data Protection Training is the deeper course for managers and people who deal with requests, breaches, complaints and data sharing.
How long do I keep access?
You keep your access for as long as Lift College offers the course, and never less than 3 years from the day you buy. Your certificate PDF is yours to keep.
What is the free refresher?
Lift College recommends refreshing this course every 12 months. When your date comes round, you can retake the latest version free and get a new certificate. We email you 30 days before.
Does it count towards my CPD?
Yes. The course is 2 hours of learning, shown on your CPD Standards Office accredited certificate, so you can log the hours in your CPD record.
Can I get my money back?
Yes. Ask within 14 days of paying and we refund you in full.
Can my employer pay?
Yes. Your receipt shows the course, the date and the amount paid, and you can pass it to your employer. Buying for a team? Open a free organisation account: every course is £16.99, and you can pay by card or invoice with your PO.
Can my team do this course in another language?
Yes, on an organisation account with 10 or more places. Your team can study Data Protection Training in Polish, Romanian, Punjabi, Urdu or Welsh, prepared within 1 working day of your order. The final test and the certificate stay in the English course name, so the certificate is the one every employer recognises. Tell us the languages you need when you order or ask for a quote.
Where can I do data protection training online in the UK?
Lift College offers Data Protection Training online for £19.99, pay once. It is 2 hours of learning in 6 short modules, and your accredited CPD certificate is ready the same day you pass.
How can my employer check my data protection certificate?
Your accredited CPD certificate has a unique certificate number and a verification link. It records the course, 2 hours of learning, your completion date and a recommended refresh-by date.
How much does Data Protection Training cost online?
Lift College's Data Protection Training is £19.99, pay once, with no subscription. Training a team? It is £16.99 a course on a free organisation account. High Speed Training charges £31.20 for its Data Protection & UK GDPR Training and CPD Online College £28.80 for its Online Data Protection Training, from their own websites on 22 October 2026.
How is Data Protection Training assessed?
By a short knowledge check after each of the 6 modules and a final test. You need 80% to pass, with unlimited free retakes, and your accredited CPD certificate is ready the same day you pass.
Can I start Data Protection Training today?
Yes. You start the moment you pay, on any device, and you can finish the 2 hours of learning in one sitting or across several. Your accredited CPD certificate is ready the same day you pass. Buying for a team? Open a free organisation account.
Which online data protection certificate do UK employers accept?
Your employer decides the data protection training each role needs, based on its own assessment of the personal data you handle and the decisions you make. A good certificate records the course, the hours of learning, the completion date and a refresh date, and it can be verified. The content should follow the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025, including the complaints duty that began on 19 June 2026. Training should also be refreshed on schedule. Lift College's course and certificate do each of these. The certificate records 2 hours of learning, your completion date and a recommended refresh-by date, with a unique certificate number and a verification link, and the refresher every 12 months is free. It is a CPD Standards Office accredited certificate (provider number 51289).
GDPR Training
Everyday GDPR for all staff. Handle personal data safely, spot a breach and know what to do next.
Equality and Diversity Training
The Equality Act 2010 in plain words. Protected characteristics, types of discrimination and reasonable adjustments.
Bullying and Harassment Training
Recognise bullying and harassment at work, know where the legal lines are and how to raise or handle a complaint.