ICO Training training that gets your team CQC-ready
- CQC-aligned, mapped to the Care Certificate framework
- Completed in the hub in over 60 languages
- A certificate for every staff member, for your CQC evidence
- A wrong answer triggers a follow-up lesson, so gaps are closed
From £25.99 per staff member, one-off. No subscription needed.
Specialists in the technology behind it all
The same AI and technology behind the world's best products powers CareStream, so your team's ico training training stays accurate, always up to date with the latest guidance, and is delivered in over 60 languages.
What is Personal Data and Why Does It Matter?
Personal data is any information that identifies a living person. In our service, this includes names, addresses, dates of birth, medical records, care plans, photographs, and even CCTV footage. Special category data is more sensitive and includes health information, ethnic origin, religious beliefs, and biometric data. UK data protection law (the UK GDPR and Data Protection Act 2018) requires us to handle all personal data carefully and lawfully. The Information Commissioner's Office (ICO) enforces these laws and can fine organisations that break the rules.
Under UK data protection law, what is the maximum time limit for reporting serious data breaches to the Information Commissioner's Office?
The correct answer is “72 hours”. In the full module, a wrong answer triggers a short follow-up lesson and a fresh question, so the gap is always closed before completion.
That is how the training works. Give your whole team the full ICO Training module.
What This Training Covers
A clear, practical grounding in ico training.
This training covers your responsibilities under UK data protection law when handling personal information about the people we support, colleagues, and others. You will learn how to protect privacy, handle information correctly, and respond to data breaches in line with our service's policies and ICO requirements.
Learning Outcomes
By the end, your staff will be able to:
What Your Team Will Learn
A closer look at the ico training module.
The module is built in short, practical sections. Each one teaches a part of the topic, then applies it to a real care scenario and checks understanding before moving on.
What is Personal Data and Why Does It Matter?
Personal data is any information that identifies a living person. In our service, this includes names, addresses, dates of birth, medical records, care plans, photographs, and even CCTV footage. Special category data is more sensitive and includes health information, ethnic origin, religious beliefs, and biometric data. UK data protection law (the UK GDPR and Data Protection Act 2018) requires us to handle all personal data carefully and lawfully. The Information Commissioner's Office (ICO) enforces these laws and can fine organisations that break the rules.
The Seven Key Principles of Data Protection
UK data protection law is built on seven principles. Personal data must be processed lawfully, fairly and transparently. It must be collected for specific purposes and not used in ways incompatible with those purposes. You should only collect and keep data that is adequate, relevant and limited to what is necessary. Data must be accurate and kept up to date. It should not be kept longer than necessary. Data must be processed securely to protect against unauthorised access, loss or damage. Finally, the organisation is accountable and must demonstrate compliance with all these principles.
Lawful Basis for Processing Personal Data
We can only process personal data if we have a lawful basis. In care settings, we usually rely on two lawful bases. First, processing is necessary for the performance of a contract, such as providing care services. Second, processing is necessary for compliance with a legal obligation, such as safeguarding duties or health and safety requirements. For special category data like health information, we need an additional condition. In care, this is usually that processing is necessary for health or social care purposes. We must be clear about our lawful basis and tell people how we use their information.
Confidentiality and Information Sharing
Confidentiality means keeping personal information private and only sharing it with people who have a right and need to know. You must not discuss personal details about the people we support or colleagues in public places, on social media, or with people outside the service unless there is a lawful reason. Information can be shared with other professionals involved in someone's care, such as doctors, social workers or pharmacists, but only the minimum necessary information. Always check identity before sharing information. If you are unsure whether to share information, ask your manager first.
Secure Handling and Storage of Information
All personal information must be stored securely. Paper records should be kept in locked cabinets when not in use and never left lying around. Computer systems must be password protected and you must log out when you finish using them. Never share your password with anyone. Do not remove records from the service without authorisation. When disposing of personal information, use a shredder or confidential waste bin, never ordinary rubbish. Mobile devices like phones or tablets used for work must be kept secure and encrypted. If you work remotely or take information off site, follow our service's specific procedures for secure handling.
Data Breaches and What to Do
A data breach happens when personal information is lost, stolen, accessed by unauthorised people, or shared inappropriately. Examples include losing a memory stick with care records, sending an email to the wrong person, or leaving files visible in a public area. Not all breaches are serious, but some must be reported to the ICO within 72 hours if they pose a risk to people's rights and freedoms. If you discover or cause a data breach, report it to your manager immediately. Do not try to hide it. Quick action can reduce harm and shows we take data protection seriously. Our service has procedures for investigating and learning from breaches.
Key Points Covered
The things your team must remember.
- Personal data is any information that identifies a living person. Special category data includes health information and must be handled with extra care.
- The seven key principles require us to process data lawfully, fairly, transparently, accurately, securely, and only for specific purposes and necessary periods.
- Keep personal information confidential. Only share it with people who have a right and need to know, and never discuss individuals in public or on social media.
- Store all personal information securely. Lock paper records away, password protect computers, always log out, and shred confidential waste.
- Report any data breach to your manager immediately, no matter how small. Quick action reduces harm and helps us meet our legal obligations.
- Respect the rights of the people we support. They have the right to know how we use their information, to access their records, and to have their privacy protected.
Who and how often
ICO Training is refreshed every year, for the staff in your care setting whose roles require it.
CQC and standards
Supports the training evidence CQC expects to see for a well-run, safe care setting.
How CareStream Delivers It
Not a slideshow once a year. Training that sticks.
CareStream delivers ico training training in the hub your team already uses, grounded in best practice and your own policies, so it fits your care setting and not a generic template.
Teach, then assess
Short teaching sections and a real care scenario, then an assessment that checks understanding.
In any language
Staff complete it in over 60 languages, while your records stay in English.
Learn and retry
A wrong answer triggers a short follow-up lesson and a fresh question, so the gap is closed.
Renewals handled
Automatic reminders at 90, 30 and 7 days, with a live compliance dashboard.
How your team gets trained
From your dashboard to your team, in the CareStream hub.
Training is delivered in the hub each staff member logs into. You allocate the modules, they complete them in their own language, and you get the completion records and certificates for your CQC evidence, with any gaps closed by automatic follow up training.
- 01
Buy and allocate
Assign ICO Training to each staff member in seconds. No course builder and no setup for each person.
- 02
They complete it in the hub
Staff work through the module on any device, in over 60 languages, teaching then checking understanding. A wrong answer sends a short follow up lesson.
- 03
You track it
See live completion status and a certificate for every person, ready as evidence for CQC.
Safeguarding Adults
ICO Training
Moving & Handling of People
Infection Prevention & Control
In every language
Any step, in their language, in one tap.
Care teams are diverse and training should not leave anyone behind. On any lesson or question, a staff member taps the language button and the whole step flips into the language they think in. They understand it properly, and your records stay in English.
- One tap flips any lesson or question into their language, instantly.
- Over 60 languages, with no setup and no separate versions to manage.
- Completions and certificates stay in English for your CQC evidence.
Try the language button in the preview, or see every language
ICO Training
Learning: what to read first
About 35 minThis training covers your responsibilities under UK data protection law when handling personal information about the people we support, colleagues, and others. You will learn how to protect privacy, handle information correctly, and respond to data breaches in line with our service's policies and ICO requirements.
Built for real learning, not box ticking
Every CareStream course goes further than a lesson and a quiz. These features come as standard on every course, giving your staff a richer way to learn and giving you the evidence to prove it.
References and further reading
Every course is built on recognised UK guidance and cites its sources, from NICE and Skills for Care to the NHS and the legislation itself.
Key terms explained
A plain English glossary of the technical terms in each course. A simple way to support every learner, including staff with English as a second language.
Measured learning gain
A quick knowledge check before the lesson is compared with the final assessment, so every certificate comes with evidence of how much the course actually taught.
Reflective practice
After passing, staff record what they will do differently in their day to day work. Their reflection is saved to their training record and shown with their certificate.
A course summary to keep
A printable one page takeaway of the outcomes, key points and key terms. Perfect for staff files, supervision conversations and the staff room wall.
Observed competency checklist
A printable checklist for managers to confirm skills in practice, with a sign off section. It completes the picture beyond the knowledge assessment.
Wrong answers become lessons, not failures
Most e learning marks an answer wrong and moves on. CareStream does not. Every wrong answer triggers an automatic follow up loop that teaches the point again and rechecks it, so no knowledge gap is left behind.
Instant lesson and feedback
A wrong answer immediately opens a short lesson explaining the point, so the gap is closed there and then.
Targeted follow up question
A fresh question on the same point checks the lesson has landed. The loop repeats until it has.
Progress only when understood
Staff move on to the next module and their certificate once they genuinely know the answer, not just after one lucky guess.
Why choose CareStream?
Training built for the care sector, delivered the way busy teams actually learn.
Time to complete: ~35 min
FAQs
Frequently asked questions.
Related training modules
More mandatory and role-specific training CareStream delivers to your team, in the hub, in any language. Add any of these to your basket.
AnnualGDPR / Data Protection
This training covers how we protect personal information at our home in line with GDPR and our Data Protection policies. You will learn about lawful processing, consent, data security, handling breaches, and responding to access requests. Understanding these rules protects residents, staff, and our service from harm and legal issues.
Bulk discounts from 10+ licences
AnnualDocumentation and Record Keeping
This training covers how we keep accurate, secure records in our home, including our digital record keeping system. Good record keeping protects the people we support, helps us provide better care, and meets our legal duties under data protection law and CQC standards.
Bulk discounts from 10+ licences
AnnualCyber Security
This training covers how to protect our computer systems, data and the people we support from cyber threats. You will learn our security procedures, how to recognise risks like phishing and viruses, and your responsibilities under data protection law. Cyber security is everyone's responsibility and protects both our service users and our organisation.
Bulk discounts from 10+ licences
AnnualPerson-Centred Care Planning
This training covers how to create and maintain care plans that truly reflect each resident's individual needs, preferences, and goals. You will learn how to involve residents and their families in planning care, and how to ensure care plans guide daily practice in a way that respects dignity, choice, and independence.
Bulk discounts from 10+ licences
AnnualActivities, Wellbeing and Meaningful Occupation
This training helps you support residents to live fulfilling lives through meaningful activities and occupation. You will learn how to recognise individual interests, promote wellbeing, and create opportunities for engagement that respect each person's abilities and preferences. This matters because meaningful activity is central to quality of life and is a CQC fundamental standard.
Bulk discounts from 10+ licences
AnnualPrivacy, Dignity and Respect in a Care Home
This training covers how we protect the privacy, dignity and respect of everyone living in our residential care home. You will learn practical ways to uphold these fundamental rights in your daily work. Respecting privacy and dignity is a legal requirement and central to providing good quality care.
Bulk discounts from 10+ licences
Give your team ico training training that actually sticks.
See how CareStream delivers your mandatory training in the hub, in any language.