Data Protection
GDPR and the Data Protection Act 2018 made practical: what personal data actually is, how to handle a DSAR, when a DPIA is required, and what to do in the first 72 hours of a breach. About 40 minutes, CPD accredited, with hands-on interactions throughout.
Five sections, five hands-on checks
Every section ends with an interaction instead of a recap slide, because clicking an answer beats rewatching a video.
The Article 4 definition, identifiers, and special category data.
SECTION 01The one-month clock, extensions, exemptions and verifying identity.
SECTION 02When a DPIA is required, and the six steps to run one properly.
SECTION 03The six lawful bases, purpose limitation and storage limitation in practice.
SECTION 04Contain, assess, and beat the 72-hour clock to the Data Protection Commission.
SECTION 05Followed by the randomised exam and your CPD accredited certificate.
Learning you do, not just watch
Two of the fourteen interaction types we build every course from, taken straight out of the Data Protection course. Have a go: wrong answers bounce, right ones lock in.
Match the role to the job
Tap a term, then the definition it belongs to. Correct pairs lock in.
0 / 5You be the judge
Six rapid-fire calls with a running score. Would your team get these right?
0 / 6
In the full course, every interaction feeds the audit trail, so the MLRO can see not just who finished, but who understood.
Data protection failures are costly and public
Significant fines
The GDPR allows administrative fines of up to 20 million euro or 4% of global annual turnover, whichever is higher, for serious breaches.
The 72-hour clock
A notifiable breach must reach the Data Protection Commission within 72 hours. Staff who spot it late leave you no time to react.
Every employee is involved
Most breaches start with everyday human error: a misdirected email or a lost device. Trained staff are your first line of defence.
Trust and reputation
Customers hand you their personal data on trust. A public breach or DPC inquiry can do lasting damage to your reputation.
About 40 minutes, including the randomised exam. It runs in any browser with nothing to install, learners can pause and resume, and the certificate is issued the moment they pass.
Yes. The course carries CPD accreditation codes issued by the LIA and the IOB, and every certificate states the course outline, completion date, exam score and CPD hours, ready for a professional CPD log or the firm’s training file.
All staff. It is written for Irish regulated firms, to the Irish legal position.
GDPR (EU) 2016/679; Data Protection Act 2018. The content is written to that legal position rather than to a generic international syllabus, and the certificate records the version taken.
Yes. Upload a list or share an invite link, track completions on the Harrington Hub dashboard, let automatic reminders chase the stragglers, and export every certificate and score in one click when an auditor or the regulator asks.
The GDPR requires staff to be trained as part of the controller’s accountability obligations, and the Data Protection Commission expects it to be refreshed. Annual training, with a record of who completed it, is the standard the DPC looks for after a breach.
Thirty minutes to audit-ready data protection.
Enrol your team on the full course: interactions, randomised exam and CPD certificates included.