BCS Data Protection Foundation Certificate - Virtual Classroom

How does the Exam Pass Guarantee work?

We have found our Virtual Classroom training has provided higher pass rates, which has made us confident to offer an Exam Pass Guarantee, so you know we’ll support you until you are certified.

With our Exam Pass Guarantee, if you do not pass the exam after attending this training course with us, you will be eligible to attend the same training again for free.

All we ask is that you:

•    Attend all class days and complete all assignments
•    Take the exam within 30 days of completing your Virtual Classroom training
•    Request your course re-enrolment within 30 days of the failed exam attempt

Please Note:

Students retaking the course are required to use any materials or books distributed to them in their original course session. Failure to provide these materials will result in the student being charged for replacement materials.

*Exam Pass Guarantee does not include the resit exam; this would need to be purchased at an additional cost.

Is the BCS Data Protection Foundation course suitable for me?  

This qualification is mainly aimed at individuals who require an understanding of data protection, specifically GDPR, to do their job. It is also ideal for delegates who would benefit from gaining an enhanced knowledge of the law in this area.

Our Foundation Certificate will act as a bridge for those who have, or who will have, responsibility for data protection, or those considering undertaking training for the BCS Practitioner Certificate in Data Protection.

What jobs can I apply for after my BCS Data Protection Foundation training?

While this training would be useful for many different backgrounds and job titles, we do find this qualification typically benefits individuals who work in the following areas:

•    Data Protection and Privacy - £23K+
•    Marketing and Sales professionals - £30K+
•    Data Management - £31K+
•    Human Resources - £31K+
•    Project Management - £44K+
•    Legal and procurement - £47K+
•    Information Governance, risk, and compliance - £48K+
•    Directors/Senior Managers with Data Protection responsibilities - £100K+

(Source: Payscale)

BCS Data Protection Foundation Syllabus

Learning Outcomes

Candidates will be able to demonstrate knowledge and understanding of: 

•    key provisions of Data
•    The History of Data Protection in the U.K.
•    Principles of Data Protection and Applicable Terminology
•    Lawful bases for processing of Personal Data
•    Governance and Accountability of Data Protection within organisations
•    Data Subject Rights
•    Independent Supervisory Authority (ICO)
•    Breaches, Enforcement and Liability
•    Privacy and Electronic Communications (EC Directive) Regulations (PECR) 2003

BCS Data Protection Foundation course outline

An Introduction to the History of Data Protection in the U.K. (5%)

•    Demonstrate an awareness around personal data rights in the EU and the UK:
•    Background to the Rights to Protect Personal Data in the EU and the U.K.
•    The Privacy and Electronic Communications (EC Directive) Regulations 2003 (Sections 5-26)
•    UK Data Protection Act 2018, Part 2, Chapters 1 to 3, Part 5 & 6

Principles of Data Protection and Applicable Terminology (15%)

•    Define the following key items of terminology
•    Personal data and Special category personal data
•    Pseudonymisation
•    Criminal Offence Data

Lawful bases for processing of Personal Data (12.5%)

•    Explain the lawful basis to process Personal Data listed under (Article 6) of the GDPR and as displayed below:
•    Describe the conditions for processing special category data and the exemptions (Article 9)

Governance and Accountability of Data Protection within organisations (20%)

•    Identify the accountability obligations 
•    Describe the purpose of a Data Protection Impact Assessment (DPIA)
•    Explain the process of conducting a DPIA
•    Identify the importance of keeping a record of processing activity  
•    Outline the interplay with privacy notices 
•    Demonstrate how to adopt a data protection by design and by default approach 
•    Identify suitable information security measures 
•    Explain the designation, position, and tasks of the Data Protection Officer (DPO) 

Interaction between Controller and Processor (7.5%)

•    Identify the following controller and processor obligations
•    Controller obligations 
•    Joint controllers 
•    Processor obligations
•    Processing under the authority of a Controller or Processor 

Transfers of personal data to third countries or international organisations (5%)

•    Recognise the general principles for transferring personal data to third countries.

Data Subject Rights (12.5%)

•    Define restrictions that may affect data subject rights.

Independent Supervisory Authority (ICO) (10%)

•    Explain the Role of the ICO
•    Investigation and correction 
•    Enforcement of regulations
•    As a body that creates guidance and codes of practice
•    In co-operation with other supervisory authorities
•    Driving forward good privacy practice in their own jurisdictions and also internationally

Breaches, Enforcement and Liability (10%)

•    Data subject
•    Identify the sanctions that could be imposed as a result of a personal data breach or data protection complaint
•    Information notices and assessment notices 
•    Undertakings
•    Enforcement notices
•    Administrative fines and their levels 
•    Data protection audits by the supervisory authority
•    Awareness of the existence of criminal liability regarding breaches under Data Protection Act 2018 and Computer Misuse Act

Privacy and Electronic Communications (EC Directive) Regulations (PECR) 2003 (2.5%)

•    Identify the relationship between the PECR and the GDPR, including the PECR’s.

BCS Data Protection Foundation Exam Details

Exam format - Multiple-choice.

Number of questions – 40.

Duration - 60-mins.

Supervised - Yes.

Open book - No.

Pass mark – 26/40 (65%).