GDPR Training
Learn how to handle personal data safely in your everyday work, and what to do the moment something goes wrong.
14-day money back · Pay once, no subscription
GDPR Training
Almost every job involves personal data. Names, addresses, emails, health notes and payroll details pass through your hands every day. One email sent to the wrong person can cause real harm to the people it is about.
This course covers what the UK GDPR expects every worker to know about handling personal data. You learn the seven principles in plain words, how to keep data secure and how to spot a breach. You also learn what to do when someone asks for their information. It includes the changes made by the Data (Use and Access) Act 2025.
- Explain what personal data and special category data are
- Apply the seven data protection principles to your daily work
- Keep personal data secure on screen, on paper and on the move
- Spot a personal data breach and report it straight away
- Recognise a subject access request, even when it is not called one
- Describe how the Data (Use and Access) Act 2025 changed the rules
5 short modules, 1.5 hours in total.
What counts as personal data
What personal data is, with everyday examples from work. The nine types of special category data and why they need extra care.
Knowledge checkThe seven principles in practice
Lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, security and accountability. What each one means for your daily tasks.
Knowledge checkKeeping data secure
Passwords, locked screens, clear desks, phishing emails and sending information to the right person. Simple habits that prevent most mistakes.
Knowledge checkSpotting and reporting a breach
What a personal data breach is, from a lost laptop to a misdirected email. Why you must report it to your manager or data protection lead at once.
Knowledge checkPeople's rights and recent changes
How to recognise a request for someone's own information and pass it on quickly. What the Data (Use and Access) Act 2025 changed in 2026.
Knowledge checkFinal test and your certificate
Multiple choice, 80% to pass, unlimited attempts. Your CPD certificate is issued by Lift College the day you pass.
This course is for you if
- You work in an office, reception or customer service role and handle customer details
- You work in care, education or health and see personal or health information
- You use email, shared drives or a CRM that holds people's details
- You are new to a job and your employer has asked you to complete GDPR training
- You need a yearly refresher on data protection basics
Your CPD certificate, issued the day you pass.
Your certificate names GDPR Training and shows 1.5 hours of learning. It also shows your completion date and a recommended refresh date 12 months later.
- One price, £19.99. One payment, one learner, no subscription.
- Short modules with a knowledge check after each one and a final test. Instant results.
- 80% to pass, with unlimited free retakes.
- A CPD certificate issued by Lift College as a PDF the same day you pass, with a unique number and a verification link.
- Access for as long as Lift College offers the course, and never less than 3 years from the day you buy.
- A free refresher when your recommended refresh date arrives. Changed your mind? Ask within 14 days of paying and we refund you in full.
CPD certificate
liftcollege.co.uk/verify/LC-CPD-000000The law this course supports
UK General Data Protection Regulation (UK GDPR)
Sets the rules for using personal data in the UK, including the seven principles and people's rights over their data. Organisations must keep personal data secure and be able to show how they comply.
Read the legislation →Data Protection Act 2018
Works alongside the UK GDPR and fills in the detail, including extra conditions for sensitive data and the powers of the Information Commissioner.
Read the legislation →Data (Use and Access) Act 2025
Amended UK data protection law. Most of its data protection changes began on 5 February 2026, and a new complaints duty for organisations began on 19 June 2026.
Read the legislation →£19.99. Pay once, nothing added.
One payment for one learner. You keep access for as long as Lift College offers the course, and never less than 3 years. Changed your mind? Ask within 14 days and we refund you in full.
- PaySecure card payment, one time only.
- Sign inYour learner account is ready straight away.
- StartBegin module 1 the same minute.
Free refresher when it is due
We recommend a refresh every 12 months. We email you 30 days before, and from the refresh date you can retake the latest version free and download a new certificate.
Questions about GDPR Training
Do all staff need GDPR training?
Your employer decides what training you need. The UK GDPR expects organisations to keep personal data secure and show how they protect it. Training staff is one practical way to do that.
What is the difference between the UK GDPR and the Data Protection Act 2018?
The UK GDPR sets the main rules for using personal data. The Data Protection Act 2018 sits alongside it and adds detail. You need to understand both, and this course explains them together in plain words.
Has GDPR changed in 2026?
Yes. The Data (Use and Access) Act 2025 amended UK data protection law. Most changes began on 5 February 2026. From 19 June 2026, organisations must also have a way for people to complain about how their data is used.
What should I do if I send an email to the wrong person?
Tell your manager or data protection lead straight away. Your organisation may need to report a serious breach to the ICO within 72 hours of becoming aware of it, so every minute counts.
How is this different from Data Protection Training?
GDPR Training is for all staff and covers everyday data handling. Data Protection Training goes deeper for managers and people who deal with subject access requests, breaches and data sharing.
How long do I keep access?
You keep your access for as long as Lift College offers the course, and never less than 3 years from the day you buy. Your certificate PDF is yours to keep.
What is the free refresher?
Lift College recommends refreshing this course every 12 months. When your date comes round, you can retake the latest version free and get a new certificate. We email you 30 days before.
Does it count towards my CPD?
Yes. The course is 1.5 hours of learning, shown on your CPD certificate issued by Lift College, so you can log the hours in your CPD record.
Can I get my money back?
Yes. Ask within 14 days of paying and we refund you in full.
Can my employer pay?
Yes. Your receipt shows the course, the date and the amount paid, and you can pass it to your employer. Lift College is not VAT registered, so no VAT is charged. Buying for a team? Ask about team enrolment and the team will help.
Data Protection Training
For managers and data leads. Handle subject access requests, breaches, complaints and data sharing with confidence.
Equality and Diversity Training
The Equality Act 2010 in plain words. Protected characteristics, types of discrimination and reasonable adjustments.
Bullying and Harassment Training
Recognise bullying and harassment at work, know where the legal lines are and how to raise or handle a complaint.
Buying for a team?
Enrol several learners at once, one invoice, and a certificate for each person the day they pass. Tell us the courses and how many people and we will set it up.