Handle personal information lawfully and securely — the law, personal and special category data, the data protection principles, confidentiality, security, people's rights and breaches.
What this course covers
- Explain why data protection matters and the law behind it
- Identify personal data and special category data
- Apply the data protection principles and confidentiality in practice
- Keep information secure and understand people's rights
- Recognise and report a data breach, and understand your role
How much does Data Protection & GDPR training cost?
£4 per person on Care2Learn, with no minimum order and no subscription. If your team needs a full training matrix rather than one course, a subscription at £2 per learner per month covers all 32 courses — see the 2026 price comparison.
Who needs it
Anyone delivering hands-on care in a CQC-regulated service, as part of their mandatory training. It covers the knowledge behind Care Certificate Standard 14, so it also suits staff working through their induction. Completion is recorded with the date taken and the date it is next due, so it appears correctly on your training matrix and can be evidenced at inspection.
What the learner receives
A certificate in their own name carrying the CPD Aligned seal, showing the completion date and the renewal date a year later, downloadable at any time. The record belongs to the learner, not just the employer — it travels with them rather than sitting in one provider's system.
Related courses
Providers usually assign these alongside Data Protection & GDPR.
- Dysphagia — 45 min online, £4 per person
- Sensory Impairment Awareness — 45 min online, £4 per person
- Positive Behaviour Support — 45 min online, £4 per person
You can also browse the full catalogue of 32 courses, or read about the Care Certificate for staff new to care.
Frequently asked questions
How long does Data Protection & GDPR training take?
About 40 min of e‑learning, across 9 sections with 11 assessment questions. Learners can stop and resume at any point, and it works on a phone.
What does Data Protection & GDPR training cover?
By the end of the course a learner should be able to explain why data protection matters and the law behind it; identify personal data and special category data; apply the data protection principles and confidentiality in practice. The full list of learning outcomes is set out above.
Is Data Protection & GDPR CPD Aligned, and how is it assessed?
Yes — the certificate carries the CPD Aligned seal. The assessment is multiple choice with a pass mark of 70%; attempts are recorded and learners can retake it. Renewal is set at 12 months from the completion date, so the course reappears on your training matrix when it is due.
Does this cover UK GDPR and the Caldicott principles?
Yes — lawful basis for processing, special category data, individuals' rights, need‑to‑know and data minimisation, record keeping, and the duty to report a qualifying breach to the ICO within 72 hours. It also covers the Caldicott duty to share, which is as important as the duty to protect.
Does this count towards the Care Certificate?
It covers the knowledge behind Care Certificate Standard 14. The Care Certificate itself is a separate guided course covering every standard, and its practical workplace assessment is completed and signed off by the employer.
Add Data Protection & GDPR to your team
£4 per person, or included on a £2 per learner subscription.
Get started