Tailored data protection support

Board level data protection training

Senior leadership and board members | 2.5 hours

This training session focuses on the strategic and governance aspects of data protection compliance. It covers accountability obligations placed on organisations, highlights financial and reputational risks linked to non compliance, clarifies the board’s oversight responsibilities, and provides practical guidance on building a strong culture of privacy across the organisation.

DPO training

Data Protection Officers and those performing at a similar role | 2.5 hours

This training session focuses on the statutory duties and responsibilities of a Data Protection Officer. It covers how to maintain independence, manage reporting lines, and confidently monitor compliance. You’ll gain practical guidance on advising on data protection impact assessments and acting as the key contact for the Information Commissioner’s Office.

Staff (induction and renewal) data protection training

All staff members | 1 hour

This training session covers the fundamentals of data protection in an accessible and practical way, including how to handle personal data securely, how to recognise and report data breaches, and how to respond to requests from individuals exercising their data protection rights.

‍

Data protection impact assessments training

1.5 hours

This training session provides practical guidance on when and how to carry out a Data Protection Impact Assessment (DPIA). It covers the legal requirements for conducting DPIAs, how to identify and assess risks to individuals, and how to document and mitigate those risks, including when consultation with the ICO may be required.

‍

Data subject rights training

2.5 hours

This training session gives an overview of the rights available to individuals under the UK GDPR, including the rights of access, rectification, erasure, restriction, data portability, and objection. It also covers how to identify and validate requests, the applicable timeframes, and exemptions.

Subject access request training

1.5 hours

This training session covers the right of access and how to manage Subject Access Requests (SARs) with confidence. It covers how to identify a valid SAR, the steps involved in searching for and reviewing personal data, how to apply exemptions, and how to manage requests that are complex, voluminous, or involve third-party data.

‍

Data sharing training

1.5 hours

This training session covers the key legal and practical considerations when sharing personal data. We explain how international data transfers work, including adequacy decisions, standard contractual clauses, and transfer risk assessments. You’ll learn how to prepare and review data sharing agreements, and how different data sharing relationships operate in practice, including controller to controller, controller to processor, and joint controller arrangements.

‍

Data breach training

1.5 hours

This training session explores how to identify, contain, and manage personal data breaches confidently and effectively. We will explain the legal obligations to notify the ICO and affected individuals, the applicable timeframes and thresholds for reporting, and the practical steps organisations should take to investigate, remediate, and learn from data breach incidents.

‍

Marketing training

1.5 hours

This training session outlines the data protection and electronic communications rules that apply to direct marketing activities. We will address the requirements of the UK GDPR and PECR in relation to email, telephone, and postal marketing, including when consent is required, how to manage opt-outs and suppression lists, as well as how to ensure marketing databases and campaigns remain compliant.

‍