Is it a good time to do data protection training?

training courses

Data protection training is often one of those things that gets put on the back burner. There never seems to be a ‘right time’ to do it. You are too busy running your business and there’s no time to squeeze in training. 

You may feel that now is an even worse time to have data protection training. There is a pandemic. You are trying to stay safe, home school your kids, look after parents – AND keep your business running!

But, this pandemic brings with it not only a risk to health but also to personal information. The World Health Organisation has reported that it has received five times more cyberattacks compared to the same period last year. Zoom, the popular video conferencing platform, has been subjected to hacking issues. There are many more stories like these. 

Working Remotely

Scammers and cyber criminals have set to work to take advantage of the fact that many people are now working from home, often without the proper security controls in place. Such controls include Remote Working Policies and Procedures, firewalls and anti-malware. Staff are using their own smart phones and laptops for work, with no instructions on how to keep work data safe or keep it separate from their own information. Families are sharing laptops and passwords, as they all try to cope with home schooling and working from home. Colleagues are not on hand to ask about unexpected yet official looking emails, or help with phone calls from genuine sounding people making unusual confidential information requests. 

With all the dangers and challenges that COVID-19 brings, it’s little wonder that some of us are being caught out by these new scams and cyberattacks. However, it highlights how important it is to have the appropriate training in order to keep information about yourself, your family and your business safe.

Appropriate Training

That said, perhaps you are appropriately set up for working from home with suitable security controls in place but perhaps you have not had data protection training for over a year. If so, now is a good time to have a refresher. The Information Commissioner’s Office expects staff processing personal data to have training in data protection on an annual basis. 

Alternatively, you may want more in-depth training or to obtain a new qualification, especially if your business is quiet at the moment. Take advantage of the lull by refreshing your existing knowledge or learning more.

For example, would you know what to do if you were to suffer a personal data breach? Our virtual Data Breach course can help with this.

Do you know how to process a Subject Access Request? Our virtual course on Subject Access Requests will guide you. 

Of course, any of our courses will help you meet the Accountability Principle under the GDPR by demonstrating that you and your staff have had data protection training.  

Do you work for a charity?

We are offering one free place on our GDPR Foundation Course in July 2020 to a charity. 

Visit the training page or give us a call. We would be glad to help. Hope to hear from you soon but in the meantime, stay safe!!

related posts

Alex Haslam

DPAS Data Protection Bulletin – July 2026

Welcome back to our monthly DPAS bulletin, where we cover the latest data protection news and developments from around the world.

Ever wondered how a routine government spreadsheet leak turns into a two-year covert court order? How about why the police might feel your mother-in-law’s contact details were key to national security? Have you ever pondered how many working weeks it takes to read a cookie banner? Whether Wall Street knows about your last GP visit? Or if you’re in Australia (g’day) why an AI is sending notes on your worst rashes to faraway cloud servers?

Read about all this and more in our latest DPAS Data Protection Bulletin.

Read More »
Alex Haslam

Root Cause Analysis: A Practical Guide

A practical guide to data breach reporting under UK GDPR, covering when you must notify the ICO, how to report a breach (and what to do if you don’t need to), and when affected individuals need to be told. Includes the key steps, timeframes, and documentation requirements to keep your organisation compliant.

Read More »
Alex Haslam

How to Report a Data Breach: A Practical Guide

A practical guide to data breach reporting under UK GDPR, covering when you must notify the ICO, how to report a breach (and what to do if you don’t need to), and when affected individuals need to be told. Includes the key steps, timeframes, and documentation requirements to keep your organisation compliant.

Read More »
Jack Penaligon

How to Respond to a Data Breach: A Practical Guide

This blog provides an overview of the practical steps organisations can take to reduce the impact of a data breach once it has been identified. It focuses on the actions that should be taken during the early stages of an incident to contain the breach, protect affected individuals, and meet regulatory requirements.

The article discusses a range of mitigation measures, including contacting unintended recipients of personal data, securing the deletion or recovery of exposed information, isolating compromised systems, and maintaining clear records of actions taken. It also explores the challenges posed by both digital and physical data breaches, highlighting the importance of balancing operational needs with data protection obligations.

Finally, the blog emphasises the value of preparation, explaining how established procedures, communication templates, and predefined response plans can help organisations respond more effectively and demonstrate accountability during a regulatory investigation.

Read More »

Get a Free Consultation