Day Data Protection Courses

Identify which course you want to attend by considering the content of each Day Course below. If you want to discussion to identify which courses meets your specific needs, please use the CONTACT US facility.

However, common combinations are: Days 1 to 3 (if you want a firm grounding in the data protection basics such as definitions and Principles); Days 2 to 4 (a focus on the main obligations, rights and transfers), and Days 1 to 5 (i.e. if you want to follow the Practitioner course syllabus without sitting the exam).

The Day Courses are delivered by face-to-face training AND via Zoom at the same time.  This allows delegates choose what type of presentation style they prefer or give maximum flexibility if something goes wrong (e.g. train cancelled; children cannot go to school).  Delegates can therefore switch between the delivery options during a course at any time.

Day 1
History and context of data protection, key definitions (e.g. personal data, controller, processor, consent, third party, recipient) and when the DPA2018 applies and when it does not. Accountability in general, DPO appointment and data protection management.
Day 2
Understanding the lawful bases for processing personal data and the conditions associated with special category of personal data/criminal offence personal data; this includes detail from each Part of Schedule 1 of the DPA2018. Obligations arising from each data protection principle from a legal and practical standpoint (e.g. transparency, security and accountability).
Day 3
DPIA, Data Breach Reporting, Data Protection by Design and Default, the Processor – Controller relationship and transfers outside the European Union and UK. The afternoon considers all the data subject rights in detail.
Day 4
Exemptions in Article 23 and Schedules 2 to 4 of the DPA2018, disclosure procedures, data sharing and the relationship between data protection and the common law of confidentiality. Application of all data protection obligations in specific sectors, such as CCTV, HR, data matching and profiling.
Day 5
Application of all data protection obligations to marketing, internet and tele-marketing and electronic marketing under the Privacy and Electronic Communications Regulations under PECR. ICO powers of enforcement, criminal offences and responsibilities.


The fee for a single public day training course is £500; two days training (£950); three days (£1,350), four days (£1,800); 5 days (£2,250). All fees quoted are ex VAT. Each day course starts at 9.30am and ends at 5.30pm.


As soon as you have chosen/listed the day courses you want to attend, can you email with that list (e.g. “I wish to attend courses Day 1 and Day 4”) and your contact details. We can then inform you of availability and location of your chosen courses. We usually run these Day courses on a two monthly cycle. Courses are held face to face or by Zoom simultaneously.