The curriculum
Every course, one subject each
Start anywhere. Each course stands on its own, so you can go straight to the thing in front of you and come back for the rest later.
GDPR Foundations
Start here and get the lay of the land with all things GDPR. This video library covers topics like the principles of GDPR, lawful bases, accountability and what the GDPR actually requires of your business.
Data Subject Rights
A practical walk-through of every data subject right and how to respond inside the deadline.
Policies Overview
An overview of the core policies your business needs. What goes into a good policy? how do you store and use these policies and what to do should someone wish to see one.
UK GDPR — Deep Dive
A complete tour of the how GDPR works in the UK, there is a common misconception that as GDPR is an EU directive, that it does not apply in the UK & this could not be more wrong! This unit covers the scope of data protection in the UK, lawful bases, accountability, transfers and enforcement.
Data Subject Access Requests (DSAR)
Handle DSARs end-to-end: triage, redaction, exemptions, and hitting the one-month deadline without leaking information.
Responding to a Data Breach
Identifying a breach and then responding to it correctly is one of the most regulated areas within GDPR. This course covers it all from identification, timelines, response. Template downloads and forms included.
Data Mapping + ROPA
Build and maintain your Records of Processing Activities so an audit is a paperwork exercise, not a panic.
International GDPR & Transfers
Adequacy decisions, IDTAs, SCCs, and the practical transfer rules for working with US and other non-EEA vendors.
AI & Data Protection
Lawful basis for training data, model risks, automated decision-making rules, and how to roll out AI tools safely.
Marketing Compliance — Social, Email, WhatsApp & Comms
PECR + UK GDPR for every marketing channel: consent, soft opt-in, list hygiene, B2B/B2C differences.
Website, Email & Internal System Compliance
Cookies, privacy notices, analytics consent, third parties, and the practical fixes for a compliant site.
Not sure where to start?
GDPR Foundations is free and takes a lunch break. It is the honest place to begin.