GDPR Training
Standard data protection training provides a slideshow of legislative text. In essence, a tick box exercise. It satisfies an audit requirement. It does not help your staff understand how to handle personal data in their roles.
Our training is built around real scenarios from your sector. We use accessible language, relevant examples and structured discussion to ensure staff understand not just the rules, but the reasons behind them.
People who understand why they are doing something are far more likely to do it consistently.
Simon has trained teams across the financial services, healthcare, legal, and charity sectors. He lectures on data protection law at the University of Pittsburgh Business School in the USA. Bringing the same rigour and clarity to a team of five, as he does to a room of two hundred.
The ICO on staff training
The ICO’s accountability framework makes clear that organisations must ensure all staff who handle personal data receive appropriate training.
This is part of demonstrating compliance and not just documenting it. In enforcement investigations, the ICO will ask for evidence of training delivered and its content.
Training for every level and need
From awareness sessions for all staff to specialist training for DPOs, compliance teams and senior management. We design sessions to match the audience and their roles within your business.
Staff awareness training
Format: Half-day or full-day | In-person or online
Practical, engaging awareness training for all staff who handle personal data. Covers the principles of UK GDPR, individual rights, data minimisation, security basics and what to do if something goes wrong.
✓ Tailored to your sector and examples from your work
✓ Scenarios and discussion, not slides and definitions
✓ Attendance records and assessment provided
Senior management & Board briefings
Format: 2–3 hours | In-person preferred
A strategic overview of data protection obligations for board members, senior leaders and trustees. Focuses on governance accountability, enforcement risk, reputational implications and the role of leadership in compliance culture.
✓ Regulatory risk in plain terms, no jargon
✓ Current ICO enforcement priorities and penalties
✓ Questions and briefing document included
Specialist topic sessions
Format: Bespoke | Half or full day
Deep-dive sessions on specific areas — handling DSARs, lawful bases and consent, PECR and marketing compliance, data breaches, international transfers, AI and data protection, or the DUAA 2025 implications for your organisation.
✓ Single-topic depth for specialist teams
✓ Policy briefings and reference materials included
✓ Can be combined into a tailored programme
DPO practitioners’ course
Format: 3 days | In-person and online modules
A comprehensive practitioner programme for those moving into or developing a DPO or compliance role. Covers the full accountability framework — ROPAs, DPIAs, LIAs, DSARs, breach response, international transfers, and the DPO’s role in practice.
✓ Developed specifically for DPOs
✓ Practical skills, not just regulatory theory
✓ Competency assessment and certificate