Start Free Trial

UK GDPR & Data Law training

Seven microlessons on UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025, with practical assessments and a certificate of completion.

Start free trial
G24.6Capterra4.7
UK GDPR & Data Law: The Data (Use and Access) Act 2025 Update course preview
7Short, TikTok-style microlessonsIn the browser or the iOS and Android apps

Compliance teams that chose 5Mins

Read their stories
Collingwood nsave ICAB Delamode LOQBOX Kennedys GSK Student Cribs Millennium Hotels Paris Baguette
  • 5Assessments
  • 7Microlessons
  • IncludedCertificate of completion
About this course

What the UK GDPR & Data Law course covers

This course covers UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025 in seven microlessons. It's built for anyone who handles personal data at work, from new joiners to managers, and covers data roles, personal data, the seven principles, individual rights, breaches and AI use.

Learning outcomes

What your people will be able to do

  • Explain UK GDPR and the updates and applications of the Data (Use and Access) Act 2025
  • Identify the lawful bases for processing and select the right one for each scenario
  • Apply the seven UK GDPR principles to data collection and retention practices
  • Distinguish controller, processor and subprocessor responsibilities, and fulfill them through compliant contracts
  • Manage subject access requests and individuals' rights, including lawful responses to erasure and rectification requests
  • Put breach response, AI accountability, documentation, risk assessments and regulatory reporting into practice
Course contents

7 microlessons

Each microlesson is a short, TikTok-style video lesson, with knowledge checks along the way.

1Why Data Privacy Matters
2UK GDPR and Data Laws Explained
3Understanding Data Roles
4What Counts as Personal Data?
5The 7 Principles of UK GDPR
6Your Rights and the Role of Organisations
7Data Breaches, AI Use, and Accountability

  1. Why Data Privacy Matters: Why protecting personal data matters for people and for your organization.
  2. UK GDPR and Data Laws Explained: A plain-English tour of UK GDPR and the wider UK data laws.
  3. Understanding Data Roles: Who is a controller, a processor or a subprocessor, and what each one owes.
  4. What Counts as Personal Data?: How to spot personal data and what falls inside the definition.
  5. The 7 Principles of UK GDPR: The seven principles that shape how personal data is collected, used and kept.
  6. Your Rights and the Role of Organisations: Individuals' rights, and how organizations handle access, erasure and rectification requests.
  7. Data Breaches, AI Use, and Accountability: Responding to breaches, using AI responsibly and showing accountability.
A 5Mins certificate of completion for UK GDPR & Data Law: The Data (Use and Access) Act 2025 Update, lying on a desk next to a laptop
Certificate

A certificate for every learner who completes it

Learners finish every microlesson, pass the assessments with a score of 80% or more and sign with a digital signature. 5Mins then issues a certificate of completion for UK GDPR & Data Law: The Data (Use and Access) Act 2025 Update.

  • Certificates and e-signatures stored against each learner
  • Audit-ready records, ready whenever an auditor asks
  • Completion shows on the Compliance Dashboard in real time
Audience and regulation

Who it's for and the law it covers

Who it's for

  • Every employee who handles personal data, from HR files to customer records
  • Managers who are accountable for how their teams collect, use and store data
  • New joiners who need a clear baseline in their first weeks
  • Teams using AI tools who need to understand their data protection responsibilities

Laws covered

  • UK GDPR, Regulation (EU) 2016/679 as it applies in the UK. The core rules on lawful bases, the seven principles, data roles, individuals' rights and breaches.
  • Data Protection Act 2018 (2018 c. 12). How the Act sits alongside UK GDPR in UK data law.
  • Data (Use and Access) Act 2025 (2025 c. 18). The latest changes to UK data law, including updates on AI use and international transfers.
Background

What changed under the Data (Use and Access) Act 2025

The Data (Use and Access) Act 2025 received Royal Assent on 19 June 2025 and amends UK GDPR, the Data Protection Act 2018 and PECR. The ICO says all of its data protection provisions are now in force. Changes organizations should know about include:

  • Recognised legitimate interests: a list of set purposes where organizations no longer need to run a balancing test.
  • Automated decision-making: significant automated decisions can rely on a wider range of lawful bases, with safeguards. Special category data is excluded.
  • Subject access requests: organizations need only carry out reasonable and proportionate searches.
  • Complaints: organizations must make it easy to complain, acknowledge complaints within 30 days and respond without undue delay.
  • Cookies and PECR: some low-risk cookies, such as statistical and functionality cookies, no longer need consent, and PECR fines now reach the UK GDPR levels of up to GBP 17.5m or 4% of global turnover.

Source: ICO, The Data (Use and Access) Act 2025: what does it mean for organisations? and legislation.gov.uk. This summary is background, not legal advice.

How it runs in 5Mins

Assign it once, then let 5Mins do the chasing

Every course in the 5Mins library runs on the same zero-admin engine.

  • EnrollAuto-enroll

    Enroll people automatically from your HR system, with 100+ HRIS platforms supported.

  • RemindReminders

    Nudges by email, Slack, Microsoft Teams and push until the course is done.

  • RepeatRecurrence

    Set the course to repeat, for example every 12 months, and 5Mins re-enrolls people for you.

  • CertifyCertificates

    Certificates and e-signatures are issued and stored for every completion.

  • ProveAudit-ready records

    See who is complete, at risk or overdue on the Compliance Dashboard, and prove it any time.

Customer stories

Compliance teams that swapped chasing for results

Compliance, HR and L&D leaders on what changed when they moved their training to 5Mins. Pick a team to see what changed.

ComplianceCompliance Training Insurance, 205 colleagues 100%

compliance completion and pass rate since go-live

  • ~1 day saved on each compliance course (HR estimate)
  • Automated reminders and reporting

Since go-live, our compliance completion and pass rates are 100%, and it's the quickest we've ever got there. Automated reminders and reporting save us about a day per course.

Laura ChappellLaura ChappellHR Director, Collingwood
Read the Collingwood story
ComplianceCompliance Training Insurance and emergency accommodation 87%

less session time, from 2.5-3 hour sessions to modules of 25 minutes at most

  • 12 monthly sessions a year, up from 3-4
  • 95% content creation time saved

Our compliance sessions used to be two and a half to three hours in a room, and we could fit in three or four a year. Now we cover one topic a month, and I can see exactly what people are retaining.

Lucy WybornLucy WybornDirector of Learning and Development, ICAB
Read the ICAB story
ComplianceCompliance Training Legal services 80%

completion on mandatory training, up from 20%

  • Mobile microlessons finished between calls
  • Manager view of each team's progress

We were sitting at 20% completion on our mandatory training. We're now at 80%. People finish short lessons between calls, on mobile, and managers can see where their teams are, so chasing completion is no longer a one-person job.

Jamie WaltonJamie WaltonGroup Learning and Development Officer, Winn Solicitors
See more customer stories
ComplianceCompliance Training Fintech and digital banking On demand

training log showing who did what, when, and the pass rate

  • Any device phone or laptop, at their own pace
  • Rolling refreshers through the year

When I engage with the FCA, I can show that every team has had training tailored to their role, that it's up to date, and that it runs throughout the year, with a full log of who's done what.

Abdul GofurAbdul GofurHead of Compliance & Anti-Financial Crime, nsave
Read the nsave story
★ Free sample lesson

See 5Mins in action with a free sample lesson

Interested in UK GDPR & Data Law training? Request a free sample lesson, book a short demo with our team, and we'll share your sample lessons after the call.

  • Real microlessons from our library
  • A short demo with our team
  • No card needed

Get a free sample lesson

Use your work email so we can arrange your demo.

We'll use your details to arrange your demo and contact you about 5Mins. See our privacy policy.

Free course catalogues

Take the catalogue with you

Free PDF catalogues to share with your compliance lead, your managers or your board.

Global Compliance Catalogue cover
Compliance

Global Compliance Catalogue

Stay compliant across every market you operate in, with regulatory training covering GDPR, data protection, workplace safety and more.

Browse all course catalogues

Your questions answered

Questions about UK GDPR & Data Law training

How long is the UK GDPR & Data Law course?

It's made up of 7 microlessons, each under 5 minutes. Learners can finish it in one sitting or spread it over a few days, and 5Mins sends reminders until it is done.

Is there a certificate?

Yes. Learners get a certificate of completion once they finish the microlessons and pass the assessments with a score of 80% or more, then sign with a digital signature. The record is stored in 5Mins for audits.

Does the course cover the Data (Use and Access) Act 2025?

Yes. The course covers UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025, including the Act's updates on AI use and international transfers.

Is GDPR training a legal requirement in the UK?

UK law doesn't say exactly what staff training must include or how often it should happen. The accountability and security duties in UK GDPR (Article 5 and Article 32) mean organizations must show appropriate measures, and the ICO expects training that fits each person's role.

Who needs UK GDPR training?

ICO advice says everyone who works for your organization, including temporary staff and volunteers. This course suits employees who handle personal data, managers, new joiners and teams using AI tools.

How often should staff take data protection training?

There's no fixed frequency in law. The ICO advises initial training plus regular refreshers, so your organization sets the schedule. In 5Mins you can set the course to repeat, for example every 12 months.

Can I try the course first?

Yes. Request a free sample lesson and book a short demo with our team. After your demo, we'll share sample lessons with you so you can see the format for yourself.

Keep exploring

Related courses

Cybersecurity & Data Protection

Data Privacy Essentials (Global)

6 microlessons View course
Cybersecurity & Data Protection

GDPR Essentials (Global)

7 microlessons View course
Cybersecurity & Data Protection

GDPR Essentials (EU)

7 microlessons View course
Cybersecurity & Data Protection

Cybersecurity Essentials for Employees (UK)

6 microlessons View course
Cybersecurity & Data Protection

Phishing Awareness (UK)

4 microlessons View course
Business Integrity & Compliance

Records Management (UK)

5 microlessons View course
All compliance micro coursesBrowse the course collection
Explore 5Mins

More free resources from 5Mins

Course collection5,000+ ready-made micro courses.Explore Course cataloguesFree PDFs to share with your team.Explore Customer success storiesFilms and case studies by industry.Explore WebinarsHR Declassified, AI Declassified and Inside 5Mins.Explore Templates and guidesSkills matrix templates and how-to guides.Explore BlogGuides on compliance, AI and leadership.Explore
Get started

Give your people compliance training they'll actually enjoy

Assign UK GDPR & Data Law and 5,000+ other micro courses in minutes, or turn your own policies into microlessons with AI Studio.

Start free trial