BCS Foundation Certificate in Data Protection

Explore the application of current data protection laws, including the EU General Data Protection Regulation (GDPR), UK GDPR and the UK Data Protection Act 2018.

Who is it for?

Anyone who needs to understand data protection and GDPR in particular.

Entry requirements

None. Some knowledge of data protection law would be an advantage to the candidate, as well as basic working knowledge of IT and GDPR.

What will I learn?

Candidates should be able to:

Hold a recognised qualification in data protection.
Gain an understanding of the key changes that the GDPR and the Data Protection Act (2018) bring to data protection.
Gain an understanding of the new rights available to data subjects and the implications of those rights with the GDPR and Data Protection Act (2018).
Gain an understanding of individual and organisational responsibilities under the GDPR and the Data Protection Act (2018), particularly the need for effectiveness record keeping.
Gain an understanding of the increased obligations faced by data controllers and data processors as a result of the GDPR coming into force and the Data Protection Act (2018) being enacted.
Be better placed to support their organisation in processing customer data in compliance with the GDPR and the Data Protection Act (2018).

The syllabus includes training objectives, details of modules and learning hours, plus a recommended reading list:

Please note: There are two versions of this syllabus live: version 3.7 and the new version 3.8 which launched at the end of February 2025. Both versions of the exam can be booked but please note the last date for booking v3.7 is 16 April. 2025. From 17th April 2025, v3.8 will be the only version of the exam which can be booked.

Download our new syllabus (PDF)

Download our new specimen paper (PDF)