GDPR / Data Protection training for your team
Licence this training for just the staff who need it. No CareStream subscription, no minimum order, no annual contract. One licence covers one member of staff for the complete GDPR / Data Protection training, in the language they think in.
- CPD Certified CourseCertified by The CPD Certification Service, worth 1 CPD hour. Every certificate carries the CPD Certified mark.
- Teach, then assessA full lesson with a real care scenario, followed by an assessment that checks they can apply it.
- Over 60 languagesStaff read the lesson and answer in their first language. Your records stay in English.
- Wrong answers get followed upA short micro-lesson goes back to the staff member on the exact point they missed, then they retry.
- Evidence you can hand overA dated completion record and a certificate per person, ready for your CQC file.
GDPR / Data Protection, start to finish.
Eight short lessons, each with a care scenario, an interactive activity and a quick check with an explanation. You start with a five question knowledge check so your learning gain can be measured, and finish with a 32 question assessment with a pass mark of 80%. This is the same training CareStream subscribers get, written for care settings rather than adapted from a generic course. It runs about 60 minutes and ends with a 32 question assessment.
- Data protection law and principles
Personal data is any information that identifies a living person, directly or indirectly: a name, address, date of birth, room number, photograph, NHS number, or a description that makes it clear who someone is.
- Confidentiality and the Caldicott Principles
Alongside data protection law, the common law duty of confidentiality means information given in confidence, such as details of a person's health and care, should not be shared without the person's consent unless there is a legal requirement or a clear justification, such as protecting someone from serious harm.
- People's rights over their information
People have rights over their personal information under UK GDPR.
- Sharing information safely
Before you share personal information, ask yourself: is there a good reason, does this person need to know for the person's care or safety, and am I sharing only what they need?
- Recording, storing and disposing of information
Care records are vital for safe care and are a legal record of what happened.
- Fraud, scams and cyber security
Care organisations hold valuable information and are targeted by criminals.
- Devices, apps and paper records
Work phones, tablets and laptops hold or give access to a great deal of personal information.
- Data breaches
A personal data breach is a security incident that affects the confidentiality, integrity or availability of personal data.
What your team will be able to do.
- Explain the UK GDPR data protection principles and why health and care information is special category data
- Apply the Caldicott Principles and the duty of confidentiality when using and sharing information
- Describe people's rights over their information, including access requests and complaints, and how to respond
- Record, store, share and dispose of personal information securely, on paper and digitally
- Recognise cyber threats such as phishing and scams, and use devices, passwords and messaging safely
- Recognise a data breach, including data received in error, and report it immediately
GDPR / Data Protection in facts.
About 60 minutes, 8 lessons
32 questions, pass mark 80%
Every year
None, completed fully online
What staff come away with
Health and care information is special category data and needs extra protection
Share on a need to know basis, but remember the duty to share can be as important as the duty to protect
People have the right to see their information; pass access requests to your data protection lead straight away
Lock screens, use strong passwords and never share logins
Stop and check before clicking links or opening attachments; scams are often urgent and convincing
Lock away paper records and use confidential waste; never leave records where others can see them
Report a suspected breach immediately: your organisation may have to tell the ICO within 72 hours
Three steps, and nothing to set up.
Checkout takes a minute. Your licences and a receipt arrive by email straight away.
Enter their names and emails, or paste a list. They get an invite to the hub on any device.
You see who has finished, their score, and their certificate as each one comes in.
Everything a licence includes.
Dated, named, and downloadable as a PDF for your training file.
Over 60 languages, chosen per staff member. Your reporting stays in English.
Buy training for one person if that is all you need. Nothing recurring.
Licences do not expire the moment you buy. Staff have a year to complete.
Before you buy.
How long does GDPR / Data Protection training take?
About 60 minutes, across 8 short lessons, followed by a 32 question assessment with a pass mark of 80%. Staff can stop and pick up where they left off.
What does the GDPR / Data Protection training cover?
8 lessons: Data protection law and principles, Confidentiality and the Caldicott Principles, People's rights over their information, Sharing information safely, Recording, storing and disposing of information, Fraud, scams and cyber security, Devices, apps and paper records and Data breaches. Each one pairs the teaching with a care scenario and a quick check.
How often do staff need to refresh GDPR / Data Protection?
CareStream sets this training so it renews every year. Staff and managers are reminded before a certificate lapses, so the refresher is booked before the gap appears.
Is GDPR / Data Protection completed fully online?
Yes. It is knowledge based, so staff complete the lessons and the assessment online and receive their certificate at the end. There is no practical sign-off.
Do I need a CareStream subscription to buy this?
No. This page exists precisely so you do not. You buy the licences you need, your staff complete the training in the CareStream hub, and that is the end of it. There is no trial to start, no card kept on file, and no subscription that begins quietly afterwards.
If you later decide you want the full platform, anything your staff have already completed carries across into your account.
What does one licence actually cover?
One licence covers one named member of staff for this training, including the lesson, the assessment, any follow-up questions triggered by a wrong answer, and their certificate. Licences are not shared between people, because the completion record has to belong to an individual to be worth anything at inspection.
How quickly can staff start?
Immediately. The licences are on your account as soon as the payment clears, and staff get their invite the moment you add them. There is no onboarding call and no setup period.
Can staff complete it in another language?
Yes. Each staff member has a first language on their profile, and the lesson, the questions and the feedback all arrive in it. They answer in that language too. What you see as a manager stays in English, so the record reads the same whoever completed it.
What if someone fails the assessment?
Nothing is lost. A wrong answer triggers a short follow-up lesson on that specific point, and they retry it. The record shows the improvement from the first attempt to the latest, which is stronger evidence than a single pass mark, because it shows the gap was found and closed.
Can I buy for more than one service?
Yes. Buy the total number of licences you need and allocate them across your services when you add staff. If you are licensing for a group and want an invoice rather than a card payment, get in touch and we will raise one.
Licence any of these the same way.
Same price, same terms, no subscription needed.
