Register Your Interest
Become a confident UK Data Protection Officer: Practitioner and GDPR training that's fully up to date with 2026 regulations.
This is the complete DPO grounding for the people actually doing the job. Whether you've just been appointed, you're stepping up from a privacy or compliance role, or you've been at it for a while and want a proper structured refresher, you'll come out with both the legal knowledge and the day-to-day practitioner skills to operate confidently under UK GDPR, the Data Protection Act 2018 and the new Data Use and Access Act 2025.
You'll work through 8 hours of expert-led video recorded by Simon Hinks of PMA Ltd, an expert UK data protection practitioner, not just an academic. The recommended pace is three focused days, but the course is fully self-paced. Get through it quicker if your schedule allows, or spread it across weeks to fit around your work. You've got 12 months of access either way.
How each session works
Every session follows the same structure, so you build skills as you go rather than just absorbing information:
- 3 comprehensive video lectures covering the laws and regulations and how to apply them
- 3 workbooks to complete alongside the lectures, designed to be written in and kept as a desk reference
- Workbook walkthrough webinars where Simon takes you through the answers to deepen your understanding
- Practical scenarios within the workbooks, involving real situations DPOs face, walked through step by step
- Integrated assessments to consolidate what you've learned
Pass each of the integrated assessments at 80% and you earn your Datalaw certificate of completion.
What you'll cover
The full UK DPO curriculum: the seven UK GDPR principles, the eight individual rights, lawful bases (including DUAA 2025's new Recognised Legitimate Interests), Subject Access Requests including the complex ones, Data Protection Impact Assessments using the ICO framework, Records of Processing Activities, Article 32 security obligations, breach management within the 72-hour window, and your statutory DPO tasks under Articles 38–39.
The course also includes full coverage of the Freedom of Information Act 2000 and the Environmental Information Regulations 2004, usually sold as separate qualifications by the main UK providers, but built in here. Important if you work in or advise the public sector, NHS, local government, schools or charities.
Why now
All content is up to date with DUAA 2025 - the biggest change to UK data protection since GDPR. The law you're learning is the law that's actually in force.
Self-paced. Practitioner-led. Built for practitioners doing the work.