Course track
Data Protection at Work (NDPA)
NDPA and GAID 2025, handling a data subject access request, sharing data with vendors safely, data minimisation and retention, breach reporting, and privacy by design.
Who takes this: All staff handling customer or employee personal data
NDPAISOSOC2
| Module | Length | What staff learn | Maps to |
|---|---|---|---|
| NDPA and GAID 2025: What Changed | 5 min | Explain the GAID's staff-training duty and how this course supports it. | NDPA |
| Handling a Data Subject Access Request | 4 min | Route a request to see, correct, or delete personal data to the right process, never answer it informally. | NDPA |
| Sharing Data with Vendors Safely | 4 min | Check before uploading or forwarding personal data to any new external tool. | NDPA |
| What Is Personal Data and Why It Matters | 5 min | Identify what counts as personal data in everyday work situations and explain why protecting it is everyone's responsibility. | NDPA, ISO |
| Lawful Bases for Processing Personal Data | 5 min | Name the main lawful bases for processing personal data and choose the right one for common workplace scenarios. | NDPA, ISO |
| Data Minimisation and Retention: Collect Less, Keep Less | 5 min | Apply data minimisation principles and set appropriate retention periods to reduce risk and meet NDPA duties. | NDPA, ISO, SOC2 |
| Keeping Data Secure: Practical Controls for Every Employee | 5 min | Apply everyday security controls, including passwords, access limits, and safe file handling, to protect personal data at work. | NDPA, ISO, SOC2 |
| Recognising and Reporting a Data Breach | 5 min | Identify when a data breach has occurred and follow the correct internal reporting steps within the required timeframe. | NDPA, ISO |
| Privacy by Design: Building Protection In from the Start | 5 min | Explain the privacy by design principle and apply it when planning new projects, products, or processes that involve personal data. | NDPA, ISO, SOC2 |
| Your Organisation's Data Protection Responsibilities: Roles and Accountability | 5 min | Describe the key data protection roles in an organisation and explain how accountability works in practice under the NDPA. | NDPA, ISO |
Compliance codes show which frameworks each module supports; they describe what the training content covers, not a guarantee of legal compliance. Confirm specific clause wording with your own compliance advisor before citing it to a regulator or auditor.