Level 2 GDPR and Data Protection

Level 2 GDPR and Data Protection

4.7 Excellent
Pivotal University
Pivotal University
The accredited training academy of Pivotal. Practical, certified courses that take you from new star...
£29.00
Enrol now — £29.00
FOR TEAMS Train your whole team

Buy seats, invite your people, and track everyone’s progress from one place.

×

Instant access · Learn at your own pace

41 lessons
12h 32m total
Lifetime access
A comprehensive Level 2 GDPR and Data Protection course for anyone who handles personal data at work — which is almost everyone. Covers the UK GDPR and the Data Protection Act 2018 in plain English, with the principles, rights and practical habits that keep an organisation compliant.

Across nine in-depth modules you'll learn the key roles and terms, personal versus special category data, the seven principles, the six lawful bases, the eight rights of individuals, accountability and governance, data security and the 72-hour breach rule, and the role of the ICO — each brought to life with clear, branded diagrams.

Finish with a final assessment (80% to pass, unlimited attempts, every answer explained) and earn your Certificate of Completion.

Please note: this is an awareness course giving every member of staff a solid working understanding of their responsibilities. It is not legal advice, and Data Protection Officers need deeper, role-specific training, with your organisation's own policies applying on top.

Course Curriculum

11 sections · 41 lessons · 12h 32m

Introduction to Data Protection
Why Data Protection Matters Preview 20 min
The UK Legal Framework: UK GDPR and the DPA 2018 Preview 25 min
Core Vocabulary: The Terms You Must Know 25 min
Knowledge Check 3 min
Personal Data and Special Category Data
What Counts as Personal Data? 25 min
Special Category Data Under Article 9 25 min
Criminal Offence Data, Pseudonymisation and Context 25 min
Knowledge Check 3 min
The Seven Principles
Principle 1: Lawfulness, Fairness and Transparency 20 min
Principles 2 & 3: Purpose Limitation and Data Minimisation 25 min
Principles 4 & 5: Accuracy and Storage Limitation 20 min
Principles 6 & 7: Security and Accountability 25 min
Knowledge Check 3 min
The Lawful Bases for Processing
The Six Lawful Bases at a Glance 25 min
Consent Done Right 25 min
Legitimate Interests and the Balancing Test 25 min
Knowledge Check 3 min
The Rights of Individuals
The Eight Rights Overview 20 min
Subject Access Requests in Practice 30 min
Erasure, Objection and the Other Rights in Depth 25 min
Knowledge Check 3 min
Accountability and Governance
Records of Processing Activities (ROPA) 20 min
Data Protection Impact Assessments (DPIAs) 25 min
Privacy by Design and by Default 20 min
DPOs, Processor Contracts and Suppliers 20 min
International Transfers 20 min
Knowledge Check 3 min
Data Security and Breaches
Technical and Organisational Measures 25 min
Everyday Security Habits 20 min
Phishing and Social Engineering 20 min
Recognising a Personal Data Breach 20 min
The 72-Hour Rule and Breach Response 30 min
Knowledge Check 3 min
The ICO and Enforcement
The ICO: Role, Powers and Tools 20 min
Fines, Reputation and Real Cases 25 min
Knowledge Check 3 min
Data Protection in Your Daily Work
Everyday Habits That Keep You Compliant 20 min
Capstone: Bringing It All Together 30 min
Knowledge Check 3 min
Resources & Glossary
Quick Reference & Glossary 5 min
Final Assessment & Certification
Final Assessment 20 min

Frequently asked questions

How long is the certificate valid, and should I refresh it?
The certificate does not expire, but data protection law and your organisation's policies change over time. Most workplaces ask staff to refresh GDPR awareness training every year or two to stay current.
Who is this course for?
It suits anyone who handles personal data at work, which is almost everyone, from new starters to managers across any sector. It is awareness training for all staff and is not a substitute for the deeper, role-specific training a Data Protection Officer needs.
Is this GDPR course accredited or officially recognised?
No. This is an awareness-level, CPD-aligned course with a certificate of completion, not a regulated or accredited qualification. It gives staff a solid working understanding of UK GDPR and the Data Protection Act 2018, but it is not legal advice.
How long does the course take?
There is around 12 hours and 32 minutes of content across 41 lessons. Because it is self-paced, you can work through it in one go or spread it over several sessions, and your progress is saved as you go.
Do I get a certificate?
Yes. When you complete the modules and pass the final assessment (80% to pass, with unlimited attempts and every answer explained), you earn a Certificate of Completion. You can download it and add it to your CV or LinkedIn profile.
Is it self-paced, and are there any prerequisites?
Yes. Every course is fully online and self-paced with lifetime access, so you can start anytime and learn at your own pace on any device. There are no prerequisites unless the course says otherwise.

Course reviews

4.7 / 5 Excellent
Very thorough

Covered everything I expected and more — I feel genuinely confident now.

S
Sarah M.
Verified learner
Good value

Practical and to the point. The examples were really relevant to my job.

D
David P.
Verified learner
Easy to follow

Loved how clearly it was laid out. Made the rules actually click.

A
Aisha K.
Verified learner
Solid refresher

Exactly the update my certificate needed. Quick and painless.

T
Tom B.
Verified learner
Highly recommend

Brilliant refresher and the diagrams made everything stick. Would happily do another.

G
Grace A.
Verified learner
Exactly what I needed

Straightforward, no fluff, and a certificate to prove it. Spot on.

O
Oliver H.
Verified learner