WAJD Learning

Employer mandated training · All staff

Data protection at work

UK GDPR for people who handle other people's information, and what to do in the first hour of a breach.

  • 2modules
  • 2.5CPD hours
  • 80guided minutes
  • Freealways

Start module 1 Create a free account to save progress

About this course

Almost everybody at work handles personal data, and almost all training on it is a list of principles nobody can apply on a Tuesday. This course is built around the decisions people actually face: can I share this, can I take this home, what do I do in the first hour after I sent something to the wrong person.

What you will be able to do

  • Apply the UK GDPR principles to real decisions
  • Recognise special category data and the extra protection it needs
  • Respond correctly in the first hour of a personal data breach
  • Handle a subject access request within the time limit

Modules

  1. 1 The principles, and the first hour of a breach 40 min study · 4 min script · 4 question knowledge check
  2. 2 Access requests, retention and sharing with other organisations 40 min study · 4 min script · 4 question knowledge check

Assessment and certificate

A knowledge check and a final assessment at 80 per cent, unlimited attempts.

A free digital certificate with a verification code and 1.5 CPD hours.

Questions

How long do I have to respond to a subject access request?

One month from receipt. It can be extended by a further two months where the request is complex or there are several, but you must tell the person within the first month that you are extending and why. There is normally no fee.

Is a lost handover sheet really a data breach?

Yes. A personal data breach is any breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. A handover sheet left on a bus is a textbook example.