Recognise personal data and special category data in everyday work, including names, work emails, CVs and health notes
For anyone who handles names, emails, CVs or client records at work. Staff learn what counts as personal and special category data, the seven principles, the rules on marketing emails, and how to spot a subject access request or a data protection complaint and pass it on the same day. They learn to recognise a personal data breach and report it at once, to handle data safely at home, at client sites and in public, and to keep personal data out of unapproved AI tools. Includes the Data (Use and Access) Act 2025 changes. General awareness, not legal advice.
Content last reviewed 8 October 2026
What you will be able to do
- Recognise personal data and special category data in everyday work, including names, work emails, CVs and health notes
- Name the seven UK GDPR principles and explain why consent is only one of seven lawful bases
- Spot a subject access request or a data protection complaint in any form and pass it on the same day
- Apply the right to object, consent and the soft opt-in when sending marketing emails
- Recognise a personal data breach, including a misdirected email, and report it internally at once
- Explain the 72-hour rule for reporting a breach to the ICO and why delay inside the organisation matters
- Handle personal data safely at home, at client sites and in public, and keep and dispose of it properly
- Use AI tools without putting personal data at risk, and explain the personal criminal offence in section 170
What is inside
5 modules, built to be applied at work.
Introduction
- Introduction2 min
Personal data and the rules for using it
- Personal data2 min
- Processing3 min
- Check your understanding2 min
Requests and complaints
- Quick recall1 min
- The eight rights4 min
- Data protection complaints2 min
- Marketing emails2 min
- Check your understanding1 min
Personal data breaches
- Quick recall1 min
- What a breach is2 min
- Tell someone straight away4 min
- Check your understanding1 min
Safe handling wherever you work
- Quick recall1 min
- Wherever you work2 min
- Keep it only as long as it is needed3 min
- Check your understanding1 min
AI tools and what is at stake
- Quick recall1 min
- AI tools and personal data2 min
- Fines for organisations3 min
- Check your understanding1 min
- Course test5 min
A credential you can prove
Finish the course and earn a certificate with its own public verification page. Share it on LinkedIn or attach it to an application; anyone can check it.
Who wrote it and who checked it
- Next review due
- 8 October 2028
Courses that pair with this one
Chosen by the people who wrote the course, so the next step follows on from this one.