ICO Training training that gets your team CQC-ready
- CQC-aligned, mapped to the Care Certificate framework
- Completed in the hub in over 60 languages
- A certificate for every staff member, for your CQC evidence
- A wrong answer triggers a follow-up lesson, so gaps are closed
No subscription needed. Bulk discounts from 10+ licences.
From £25.99 per staff member, one-off. No subscription needed.
Trusted by UK care providers
Specialists in the technology behind it all
The same technology behind the world's best products powers CareStream, so your team's ico training training stays accurate, always up to date with the latest guidance, and is delivered in over 60 languages.
What is Personal Data and Why Does It Matter?
Personal data is any information that identifies a living person. In your service, this includes names, addresses, dates of birth, medical records, care plans, photographs, and even CCTV footage.
Special category data is more sensitive and includes health information, ethnic origin, religious beliefs, and biometric data. UK data protection law (the UK GDPR and Data Protection Act 2018) requires us to handle all personal data carefully and lawfully.
The Information Commissioner's Office (ICO) enforces these laws and can fine organisations that break the rules.
Under UK data protection law, what is the maximum time limit for reporting serious data breaches to the Information Commissioner's Office?
In the hub, a wrong answer sends the staff member a short follow-up lesson and a fresh question on the same point. They close the gap before they can finish the module, and every attempt is recorded for your CQC evidence.
That is how the training works. Give your whole team the full ICO Training module.
Avg. Duration
About 35 minutes
Certificate
For every staff member
Available Languages (60+)
Course Published by
A clear, practical grounding in ico training.
This training covers your responsibilities under UK data protection law when handling personal information about the people we support, colleagues, and others. You will learn how to protect privacy, handle information correctly, and respond to data breaches in line with your service's policies and ICO requirements.
By the end, your staff will be able to:
- Explain the key principles of data protection law and how they apply to your daily work
- Identify what counts as personal data and special category data in care settings
- Describe the correct procedures for handling, storing, and sharing personal information
- Recognise potential data breaches and explain the steps to take when one occurs
- Apply the principles of confidentiality and information security in realistic care scenarios
A closer look at the ico training module.
The module is built in short, practical sections. Each one teaches a part of the topic, then applies it to a real care scenario and checks understanding before moving on.
What is Personal Data and Why Does It Matter?
Personal data is any information that identifies a living person. In your service, this includes names, addresses, dates of birth, medical records, care plans, photographs, and even CCTV footage. Special category data is more sensitive and includes health information, ethnic origin, religious beliefs, and biometric data. UK data protection law (the UK GDPR and Data Protection Act 2018) requires us to handle all personal data carefully and lawfully. The Information Commissioner's Office (ICO) enforces these laws and can fine organisations that break the rules.
The Seven Key Principles of Data Protection
UK data protection law is built on seven principles. Personal data must be processed lawfully, fairly and transparently. It must be collected for specific purposes and not used in ways incompatible with those purposes. You should only collect and keep data that is adequate, relevant and limited to what is necessary. Data must be accurate and kept up to date. It should not be kept longer than necessary. Data must be processed securely to protect against unauthorised access, loss or damage. Finally, the organisation is accountable and must demonstrate compliance with all these principles.
Lawful Basis for Processing Personal Data
We can only process personal data if we have a lawful basis. In care settings, we usually rely on two lawful bases. First, processing is necessary for the performance of a contract, such as providing care services. Second, processing is necessary for compliance with a legal obligation, such as safeguarding duties or health and safety requirements. For special category data like health information, we need an additional condition. In care, this is usually that processing is necessary for health or social care purposes. We must be clear about our lawful basis and tell people how we use their information.
Confidentiality and Information Sharing
Confidentiality means keeping personal information private and only sharing it with people who have a right and need to know. You must not discuss personal details about the people we support or colleagues in public places, on social media, or with people outside the service unless there is a lawful reason. Information can be shared with other professionals involved in someone's care, such as doctors, social workers or pharmacists, but only the minimum necessary information. Always check identity before sharing information. If you are unsure whether to share information, ask your manager first.
Secure Handling and Storage of Information
All personal information must be stored securely. Paper records should be kept in locked cabinets when not in use and never left lying around. Computer systems must be password protected and you must log out when you finish using them. Never share your password with anyone. Do not remove records from the service without authorisation. When disposing of personal information, use a shredder or confidential waste bin, never ordinary rubbish. Mobile devices like phones or tablets used for work must be kept secure and encrypted. If you work remotely or take information off site, follow your service's specific procedures for secure handling.
Data Breaches and What to Do
A data breach happens when personal information is lost, stolen, accessed by unauthorised people, or shared inappropriately. Examples include losing a memory stick with care records, sending an email to the wrong person, or leaving files visible in a public area. Not all breaches are serious, but some must be reported to the ICO within 72 hours if they pose a risk to people's rights and freedoms. If you discover or cause a data breach, report it to your manager immediately. Do not try to hide it. Quick action can reduce harm and shows we take data protection seriously. your service has procedures for investigating and learning from breaches.
The things your team must remember.
- Personal data is any information that identifies a living person. Special category data includes health information and must be handled with extra care.
- The seven key principles require us to process data lawfully, fairly, transparently, accurately, securely, and only for specific purposes and necessary periods.
- Keep personal information confidential. Only share it with people who have a right and need to know, and never discuss individuals in public or on social media.
- Store all personal information securely. Lock paper records away, password protect computers, always log out, and shred confidential waste.
- Report any data breach to your manager immediately, no matter how small. Quick action reduces harm and helps us meet our legal obligations.
- Respect the rights of the people we support. They have the right to know how we use their information, to access their records, and to have their privacy protected.
Not a slideshow once a year. Training that sticks.
CareStream delivers ico training training in the hub your team already uses, grounded in best practice and your own policies, so it fits your care setting and not a generic template.
Short teaching sections and a real care scenario, then an assessment that checks understanding.
Staff complete it in over 60 languages, while your records stay in English.
A wrong answer triggers a short follow-up lesson and a fresh question, so the gap is closed.
Automatic reminders at 90, 30 and 7 days, with a live compliance dashboard.
From your dashboard to your team, in the CareStream hub.
Training is delivered in the hub each staff member logs into. You allocate the modules, they complete them in their own language, and you get the completion records and certificates for your CQC evidence, with any gaps closed by automatic follow up training.
Assign ICO Training to each staff member in seconds. No course builder and no setup for each person.
Staff work through the module on any device, in over 60 languages, teaching then checking understanding. A wrong answer sends a short follow up lesson.
See live completion status and a certificate for every person, ready as evidence for CQC.
Any step, in their language, in one tap.
Care teams are diverse and training should not leave anyone behind. On any lesson or question, a staff member taps the language button and the whole step flips into the language they think in. They understand it properly, and your records stay in English.
- One tap flips any lesson or question into their language, instantly.
- Over 60 languages, with no setup and no separate versions to manage.
- Completions and certificates stay in English for your CQC evidence.
Try the language buttons in the preview above.
Built for real learning, not box ticking
Every CareStream course goes further than a lesson and a quiz. These features come as standard on every course, giving your staff a richer way to learn and giving you the evidence to prove it.
Every course is built on recognised UK guidance and cites its sources, from NICE and Skills for Care to the NHS and the legislation itself.
A plain English glossary of the technical terms in each course. A simple way to support every learner, including staff with English as a second language.
A quick knowledge check before the lesson is compared with the final assessment, so every certificate comes with evidence of how much the course actually taught.
After passing, staff record what they will do differently in their day to day work. Their reflection is saved to their training record and shown with their certificate.
A printable one page takeaway of the outcomes, key points and key terms. Perfect for staff files, supervision conversations and the staff room wall.
A printable checklist for managers to confirm skills in practice, with a sign off section. It completes the picture beyond the knowledge assessment.
Wrong answers become lessons, not failures
Most e learning marks an answer wrong and moves on. CareStream does not. Every wrong answer triggers an automatic follow up loop that teaches the point again and rechecks it, so no knowledge gap is left behind.
A wrong answer immediately opens a short lesson explaining the point, so the gap is closed there and then.
A fresh question on the same point checks the lesson has landed. The loop repeats until it has.
Staff move on to the next module and their certificate once they genuinely know the answer, not just after one lucky guess.
Why choose CareStream?
Training built for the care sector, delivered the way busy teams actually learn.
- 90+ care-specific training courses
- Bitesize, engaging lessons your staff actually finish
- Mapped to the Care Certificate & CQC standards
- Available in 60+ languages
- Instant certificate on completion
- Flexible learning, anytime, on any device
- Content kept up to date with UK care regulations
- Time to complete: ~35 min
Frequently asked questions.
Is ICO Training training mandatory in care settings?
How often should staff complete ICO Training training?
Can CareStream deliver ICO Training training in other languages?
Does the training include an assessment?
More training your team may need
More mandatory and role-specific training CareStream delivers to your team, in the hub, in any language. Add any of these to your basket.
Annual CertificateGDPR / Data Protection
This training covers how we protect personal information at our home in line with GDPR and our Data Protection policies. You will learn about lawful processing, consent, data security, handling breaches, and responding to access requests. Understanding these rules protects residents, staff, and our service from harm and legal issues.
Bulk discounts from 10+ licences
Annual CertificateDocumentation and Record Keeping
This training covers how we keep accurate, secure records in our home, including our digital record keeping system. Good record keeping protects the people we support, helps us provide better care, and meets our legal duties under data protection law and CQC standards.
Bulk discounts from 10+ licences
Annual CertificateCyber Security
This training covers how to protect our computer systems, data and the people we support from cyber threats. You will learn our security procedures, how to recognise risks like phishing and viruses, and your responsibilities under data protection law. Cyber security is everyone's responsibility and protects both our service users and our organisation.
Bulk discounts from 10+ licences
Annual CertificatePerson-Centred Care Planning
This training covers how to create and maintain care plans that truly reflect each resident's individual needs, preferences, and goals. You will learn how to involve residents and their families in planning care, and how to ensure care plans guide daily practice in a way that respects dignity, choice, and independence.
Bulk discounts from 10+ licences
Annual CertificateActivities, Wellbeing and Meaningful Occupation
This training helps you support residents to live fulfilling lives through meaningful activities and occupation. You will learn how to recognise individual interests, promote wellbeing, and create opportunities for engagement that respect each person's abilities and preferences. This matters because meaningful activity is central to quality of life and is a CQC fundamental standard.
Bulk discounts from 10+ licences
Annual CertificatePrivacy, Dignity and Respect in a Care Home
This training covers how we protect the privacy, dignity and respect of everyone living in our residential care home. You will learn practical ways to uphold these fundamental rights in your daily work. Respecting privacy and dignity is a legal requirement and central to providing good quality care.
Bulk discounts from 10+ licences
Give your team ico training training that actually sticks.
Add it to your basket, allocate it in seconds, and let the evidence build itself.
Compared
Three ways to train a care team.
These modules are written and kept current by us, so your managers do not have to write or maintain them. We have compared what each approach does rather than naming providers, because products change and this should still be true next year.
| CareStream | A generic e-learning library | A trainer you book | |
|---|---|---|---|
| Try a real lesson and a real question before you buy | |||
| Learning outcomes and time to complete stated up front | |||
| Written lesson sections, each with its own illustration | |||
| Interactive exercises after the lesson that teaches them, in every module | |||
| Assessment in every module, with the key points to revisit | |||
| Taken in any of sixty plus languages | |||
| A wrong answer triggers a follow-up lesson, not just a re-sit | |||
| Practical sign-off by a manager where the subject needs it | |||
| Completion files itself into your training matrix and evidence pack | |||
| Bought one module at a time, with no annual contract |
Generic libraries are often cheaper per learner. They teach a national standard rather than being built, updated and evidenced around the way a CQC-registered service is actually inspected.
Care policies
Every module is written from a policy
If the policy behind it is out of date, the training inherits that. Sixty six policies written for your service, checked against current law and read by a person before they carry your name, from £39.
