Course track
Data Protection at Work (NDPA)
NDPA and GAID 2025, handling a data subject access request, sharing data with vendors safely, data minimisation and retention, breach reporting, and privacy by design.
Who takes this: All staff handling customer or employee personal data
NDPAISOSOC2
| Module | Length | What staff learn | Maps to |
|---|---|---|---|
| NDPA and GAID 2025: What Changed | 5 min | Explain the GAID's staff-training duty and how this course supports it. | NDPA |
| Handling a Data Subject Access Request | 4 min | Route a request to see, correct, or delete personal data to the right process, never answer it informally. | NDPA |
| Sharing Data with Vendors Safely | 4 min | Check before uploading or forwarding personal data to any new external tool. | NDPA |
| What Is Personal Data and Why It Matters | 5 min | Identify what counts as personal data in everyday work situations and explain why protecting it is everyone's responsibility. | NDPA, ISO |
| Lawful Bases for Processing Personal Data | 5 min | Name the main lawful bases for processing personal data and choose the right one for common workplace scenarios. | NDPA, ISO |
| Data Minimisation and Retention: Collect Less, Keep Less | 5 min | Apply data minimisation principles and set appropriate retention periods to reduce risk and meet NDPA duties. | NDPA, ISO, SOC2 |
| Keeping Data Secure: Practical Controls for Every Employee | 5 min | Apply everyday security controls, including passwords, access limits, and safe file handling, to protect personal data at work. | NDPA, ISO, SOC2 |
| Recognising and Reporting a Data Breach | 5 min | Identify when a data breach has occurred and follow the correct internal reporting steps within the required timeframe. | NDPA, ISO |
| Privacy by Design: Building Protection In from the Start | 5 min | Explain the privacy by design principle and apply it when planning new projects, products, or processes that involve personal data. | NDPA, ISO, SOC2 |
| Your Organisation's Data Protection Responsibilities: Roles and Accountability | 5 min | Describe the key data protection roles in an organisation and explain how accountability works in practice under the NDPA. | NDPA, ISO |
Compliance codes show which frameworks each module supports. Some clauses are marked "verify" in our source review, meaning we phrase the claim cautiously rather than cite an exact, unconfirmed section number. See the glossary for term definitions.