GDPR / Data Protection training for your team
Licence this one module for the staff who need it. No CareStream subscription, no minimum order, no annual contract. One licence covers one member of staff for the complete GDPR / Data Protection module, in the language they think in.
- Teach, then assessA full lesson with a real care scenario, followed by an assessment that checks they can apply it.
- Over 60 languagesStaff read the lesson and answer in their first language. Your records stay in English.
- Wrong answers get followed upA short micro-lesson goes back to the staff member on the exact point they missed, then they retry.
- Evidence you can hand overA dated completion record and a certificate per person, ready for your CQC file.
GDPR / Data Protection, start to finish.
This training covers how we protect personal information at the care setting in line with GDPR and our Data Protection policies. You will learn about lawful processing, consent, data security, handling breaches, and responding to access requests. This is the same module CareStream subscribers get, written for care settings rather than adapted from a generic course. It runs about 35 minutes and ends with a 20 question assessment.
- Understanding Personal Information and Lawful Basis
Personal information is any data that identifies a living person, such as names, addresses, health records, or photographs.
- Obtaining and Recording Consent
Sometimes we need specific consent to use personal information, especially for purposes beyond basic care provision, such as sharing photographs or providing information to researchers.
- Data Security and Confidentiality
We must keep all personal information secure and confidential.
- Recognising and Reporting Data Breaches
A data breach happens when personal information is lost, accessed by unauthorized people, altered, or disclosed inappropriately.
- Data Protection Impact Assessments
A Data Protection Impact Assessment (DPIA) identifies and reduces privacy risks when we start new projects or change how we handle information.
- Access Requests and Records of Deceased Residents
Living individuals have the right to access their personal information.
What your team will be able to do.
- Identify when you need consent to collect or use personal information and how to obtain it properly
- Explain the lawful basis for processing personal data in your daily care work
- Recognise situations requiring a Data Protection Impact Assessment
- Apply correct procedures when a data breach occurs or is suspected
- Describe how to handle requests for access to records, including those of deceased residents
GDPR / Data Protection in facts.
About 35 minutes, 6 lessons
20 questions, pass mark 80%
Every year
None, completed fully online
What staff come away with
Always have a lawful basis for collecting and using personal information, usually to provide care or meet legal duties
Obtain specific, informed consent when required and record it properly; people can withdraw consent at any time
Keep all personal information secure: lock screens, secure files, never discuss residents in public areas
Report any suspected data breach immediately to the manager, even if accidental
Recognize when a Data Protection Impact Assessment is needed for new projects or technology
Treat records of deceased residents with the same confidentiality as living people; refer access requests to the manager
Three steps, and nothing to set up.
Checkout takes a minute. Your licences and a receipt arrive by email straight away.
Enter their names and emails, or paste a list. They get an invite to the hub on any device.
You see who has finished, their score, and their certificate as each one comes in.
Everything a licence includes.
Dated, named, and downloadable as a PDF for your training file.
Over 60 languages, chosen per staff member. Your reporting stays in English.
Buy one module for one person if that is all you need. Nothing recurring.
Licences do not expire the moment you buy. Staff have a year to complete.
Before you buy.
How long does GDPR / Data Protection training take?
About 35 minutes, across 6 short lessons, followed by a 20 question assessment with a pass mark of 80%. Staff can stop and pick up where they left off.
What does the GDPR / Data Protection module cover?
6 lessons: Understanding Personal Information and Lawful Basis, Obtaining and Recording Consent, Data Security and Confidentiality, Recognising and Reporting Data Breaches, Data Protection Impact Assessments and Access Requests and Records of Deceased Residents. Each one pairs the teaching with a care scenario and a quick check.
How often do staff need to refresh GDPR / Data Protection?
CareStream sets this module so it renews every year. Staff and managers are reminded before a certificate lapses, so the refresher is booked before the gap appears.
Is GDPR / Data Protection completed fully online?
Yes. It is knowledge based, so staff complete the lessons and the assessment online and receive their certificate at the end. There is no practical sign-off.
Do I need a CareStream subscription to buy this?
No. This page exists precisely so you do not. You buy the licences you need, your staff complete the module in the CareStream hub, and that is the end of it. There is no trial to start, no card kept on file, and no subscription that begins quietly afterwards.
If you later decide you want the full platform, anything your staff have already completed carries across into your account.
What does one licence actually cover?
One licence covers one named member of staff for this one module, including the lesson, the assessment, any follow-up questions triggered by a wrong answer, and their certificate. Licences are not shared between people, because the completion record has to belong to an individual to be worth anything at inspection.
How quickly can staff start?
Immediately. The licences are on your account as soon as the payment clears, and staff get their invite the moment you add them. There is no onboarding call and no setup period.
Can staff complete it in another language?
Yes. Each staff member has a first language on their profile, and the lesson, the questions and the feedback all arrive in it. They answer in that language too. What you see as a manager stays in English, so the record reads the same whoever completed it.
What if someone fails the assessment?
Nothing is lost. A wrong answer triggers a short follow-up lesson on that specific point, and they retry it. The record shows the improvement from the first attempt to the latest, which is stronger evidence than a single pass mark, because it shows the gap was found and closed.
Can I buy for more than one service?
Yes. Buy the total number of licences you need and allocate them across your services when you add staff. If you are licensing for a group and want an invoice rather than a card payment, get in touch and we will raise one.
Licence any of these the same way.
Same price, same terms, no subscription needed.
