UK GDPR and DUAA: 2025 - Intermediate

Regulatory compliance - Data protection
What line managers need to run data protection day to day

This course is for line managers and team leaders in a UK workplace who are responsible for how their team handles personal data under the UK GDPR and the Data (Use and Access) Act 2025. It builds on the Foundation course and focuses on the decisions a manager actually makes.

You'll learn how to meet the accountability duty and choose a lawful basis, build a privacy-aware team, handle subject access requests and complaints, manage a personal data breach in your team, and oversee suppliers, contracts, and data transfers. By the end, you'll lead data protection day to day with confidence and know when to escalate.

Access

Self-Paced Learning

Modules

10 Modules

Certification

Certificate of Completion

Price

€150
Learning Objectives
Course Benefits
Modules
By the end of this course, learners will be able to:

  • Meet the accountability duty and choose and record the right lawful basis for your team's processing
  • Build a privacy-aware team: set expectations, spot risks, and embed good data habits day to day
  • Handle subject access requests and complaints correctly, within the timescales the DUAA 2025 sets
  • Manage a personal data breach in your team: contain it, capture the facts, and escalate without delay
  • Oversee suppliers, contracts, and data transfers so personal data stays protected outside the organisation
  • Know where your responsibility ends and the data protection lead's begins, and when to escalate
Benefits for the Organisation

• Equip every line manager to run data protection day to day and ease the load on your DPO and HR
• Reduce the risk of breaches, complaints, and ICO enforcement caused by everyday management decisions
• Evidence completed manager-level data protection training, with assessment results and certificates
• Standardise how managers handle requests, complaints, breaches, and suppliers across the organisation
• Save senior leaders and DPOs the time spent correcting avoidable mistakes at team level

Benefits for Learners

• Understand what the UK GDPR and the DUAA 2025 ask of you as a manager
• Apply accountability and the right lawful basis confidently to your team's processing
• Handle subject access requests and complaints correctly and to time
• Know how to contain, escalate, and report a personal data breach in your team
• Pass the assessment knowing every answer reflects how management works in practice

Lesson 1: Welcome and how this works
Get oriented to the course and to your role in data protection as a manager, see how the course works, and acknowledge the disclaimer before you begin.

Lesson 2: Accountability and choosing a lawful basis
Meet the accountability duty and learn how to choose, document, and justify the right lawful basis for the personal data your team processes.

Lesson 3: Building a privacy-aware team
Set clear expectations, spot everyday risks, and embed the habits that keep your team handling personal data well without you watching every step.

Lesson 4: Handling requests and complaints
Recognise a subject access request or a complaint, know the timescales under the DUAA 2025, and follow the right steps to respond and route it.

Lesson 5: Managing a breach in your team
Lead the first response to a personal data breach: stay calm, contain it, capture the facts, and escalate to the data protection lead without delay.

Lesson 6: Suppliers, contracts and data transfers
Oversee the suppliers and contracts your team relies on, and know what to check before personal data moves outside the organisation.

Lesson 7: Resources for managers
Know where to turn for help: the ICO, your data protection lead, and the trusted guidance and templates a manager can return to.

Lesson 8: Final assessment
Ten multiple-choice questions covering the whole course, with an 80 percent pass mark and two attempts, so you can show what you have learned.

Lesson 9: Feedback and certificate
Share your feedback on the course and claim your certificate of completion.

Lesson 10: Your certificate and next steps
Download your certificate and see how Course 3 (Advanced) takes you deeper into running the data protection programme.

CORPORATE TRAINING

We Can Train Your Employees

Every organisation is different - and so are its learning needs.

Request a call back to talk through:


  • Your current onboarding or training challenges
  • Skills gaps across teams or roles
  • Compliance, wellbeing, or development priorities
  • How digital learning can support performance and retention
  • Special pricing options for multiple seats or team-wide access


We’ll help you explore practical, people-first solutions that fit your organisation.

Course FAQ's

Who is this course for?

Line managers and team leaders in a UK workplace who are responsible for how their team handles personal data, across England, Wales, and Scotland. It is a useful step up from the Foundation course and a sound base before role-specific data protection training.

Some basic familiarity with data protection helps, and the Foundation course is a good starting point, but it is not required.

Where and when can I take this course?

The course can be taken at any time and from any internet-connected device.

Do I need prior knowledge or experience?

This is an intermediate-level course for line managers. The concepts build on the basics, but everything is explained in plain language with practical examples, so you can follow it without a legal background.

Can this course be used for company-wide training?

Absolutely. This course is designed to be rolled out to every line manager and team leader who is responsible for how their team handles personal data.

Do I get a discount if I buy multiple seats for this course?

Yes. Please contact us and we will issue a quote according to your needs.

Will managers be able to track progress and completion?

Yes. Branch managers and administrators can track learner progress, completion rates, and assessment performance across the course.

This gives clear visibility on engagement and outcomes, making it easier to monitor participation, support staff where needed, and evidence completed data protection training to auditors and the ICO.

Is this course part of a larger data protection programme?

Yes. This is Course 2 of the Auren UK GDPR and DUAA 2025 bundle - the Intermediate course for line managers. It follows Course 1 (Foundation), which everyone who handles personal data starts from, and is followed by Course 3 (Advanced), for the DPOs, HR leads, and senior managers who run the data protection programme.

All three courses in the bundle can be taken as stand-alone courses.