Data Protection Act 2018 Training
Home / Data Protection Training / Data Protection Act Training
Training for UK Data Protection Legislation
What is the UK Data Protection Act 2018?
The Data Protection Act 2018 is the UK’s main data protection law, which works alongside the UK General Data Protection Regulation (UK GDPR). It sets out how personal data must be handled, stored, and protected by organisations and public bodies.
It replaced the older Data Protection Act 1998, bringing the UK’s law in line with the EU GDPR and tailoring it for the UK legal system.
Course Overview
This course provides an overview of the UK data protection legislation in terms of its core components and alignment with the GDPR. Course duration is one day and can be done online or classroom based.
- Certified Qualification
- Course Duration is 1 Day
- Online Instructor Led
- Provides In-depth Knowledge
- Classroom Based Option
- Multiple Locations Available
What is the course curriculum?
The course consists of instructor led tuition either online or classroom based.
It consists of 10 modules that are covered over the one day training period.

UK Data Protection Act 2018 Training
£1295.00 + VAT
Fee applies to a single user license. Discounts are available for multiple users.
Introducing Data Protection
Six Data Protection Principles
What are the Penalties?
What can We Get an Administrative Fine for?
What Influences the Size of an Administrative Fine?
Staff Member Responsibilities
Personal Information
Sensitive Data
Judicial and Statutory Purposes
Safeguarding of children and individuals at risk
Individual’s vital interests
Archiving
Preventing Fraud
Information Commissioner’s Office (ICO)
Law Enforcement
- Right to Be Informed
- Right to Be Informed: When Should Information Be Provided?
- Best Practice Guidance: Selling/Sharing PII
- Best Practice Guidance: Purchasing PII
- Best Practice Guidance: Publicly Derived PII
- Best Practice Guidance: Artificial Intelligence (AI)
- Right of Access
- Right to Rectification
- Right to Erasure (The Right to Be Forgotten)
- When Can I Refuse to Comply with a Request for Erasure?
- Erasing Children’s Data
- Right to Restrict Processing
- When Processing Should be Restricted
- Other Issues about Restricting Processing
- Right to Data Portability
- Right to Object
- Complying with the Right to Object
- Rejecting the Right to Object
- Right to Object: Processing for Direct Marketing Purposes
- Right to Object: Processing for Research Purposes
- Rights Related to Automated Decision Making and Profiling (1)
- Rights Related to Automated Decision Making and Profiling (2)
- Rights Related to Automated Decision Making and Profiling (3)
- When does the Right not apply?
Documenting and Logging Data
What Must Be Recorded?
Maintaining Records
What is Personal Information?
Who Has PII?
Who Processes PII?
Demonstrating Compliance
Protecting PII
Role of a Data Protection Officer
Involvement of the DPO
Main Responsibilities of the DPO
Working Environment for the DPO
Must We Have a DPO?
Overview: Incident Response Plan
Developing an Incident Response Plan
Preparation
Identification
Containment
Eradication
5 Whys
How to Complete The 5 Whys
Fishbone Diagram
Recovery
Lessons Learned
Incidence Response: DPOs role
External Transfers
Cross Border Transfers
Transfer Mechanisms
Derogations
Adequacy
Adequate Ways to Safeguard Transfers of PII
One-Off or Infrequent Transfers
Transferring PII Between EEA Members
Adequate Countries Outside of the EEA
EU-US Privacy Shield
Privacy Shield Overview
Privacy Shield: Mechanics
Model Clauses
Public Authority Agreements


What’s included?
World-Class Training Sessions from Experienced Instructors
Data Protection Act (DPA 2018) Certificate
Digital Delegate Pack
Current Incentives
We are offering discounts of 10% for a second user of 15% for three users or more
Easy Enrolment
It’s very easy to enrol on one of our online or classroom based training courses.
Simply fill out the contact form and we will be in touch to find out your exact requirements e.g. number of licenses, desired date and preferred location (if classroom based).