All courses · Data protection · Volume 7

Auditing UK GDPR

Accountability, rights requests, breaches, DPIAs, third parties and the new complaints duty, updated for the Data (Use and Access) Act 2025.

See the packsWhat's inside
21slides with notes
4Excel exercises
DUAA2025 changes

What you will be able to do

Learning outcomes

  • Explain the UK GDPR principles and what accountability evidence an organisation should hold
  • Describe the Data (Use and Access) Act 2025 changes and how they alter audit criteria
  • Test subject access requests, breach handling and the new complaints duty from complete logs
  • Assess DPIAs, processor contracts, international transfers and retention
  • Report data protection findings in business terms without giving legal advice

Part 1: The law in 2026

Seven principles, and what an auditor looks for · What changed, and when · The evidence a well-run organisation can produce

Part 2: Testing the controls

Does the record match what really happens? · A request answered properly, step by step · From discovery to decision in 72 hours · High-risk processing needs an assessment first · Your data in someone else's hands · Keeping data for as long as needed, and no longer · The duty to handle data protection complaints

Part 3: Testing and reporting

Testing data protection controls · Six ways data protection audits go wrong

21-slide course deck

Full speaker notes, a worked audit finding, a knowledge check and current sources, with the 2026 dates for each change.

Participant workbook

Notes pages, a finding template, a 10-question knowledge check and a glossary.

Excel exercises

Find unlogged and late subject access requests. Test breach decisions and 72-hour reporting. Test the new complaints duty. Find processors without contracts or transfer checks. All data is fictional.

This course is training material, not legal advice. All organisations, people and data in the exercises are fictional.

Pricing

Choose your pack

Learner Pack

£29 one-off

For auditors, DPOs and GRC professionals building their skills.

  • Course deck (PDF, 21 slides)
  • Participant workbook
  • Excel exercise file
  • Single-user licence
Buy the Learner Pack

Trainer Licence

£149 one-off

For audit managers, trainers and consultancies.

  • Everything in the Learner Pack
  • Editable PowerPoint with full speaker notes
  • Exercise answer key and model finding
  • Licence to deliver the course to your own teams or clients
Buy the Trainer Licence

Secure checkout by Stripe. Files are emailed within one working day. Training your whole team? See the staff awareness course.