Find a course

The General Data Protection Regulation (GDPR) for Local Authorities

Understand the GDPR legislation and ensure you are compliant in your line of work.

Online / In Person
1 day

About this course

Under the General Data Protection Regulation (GDPR), in force since 25th May 2018, public and private organisations are required to meet a very high standard in how they collect, use and protect personal data.

Learn how this applies to you and your team.

Course syllabus

Key learning points:

  • GDPR and what it means for you,
  • Accountability,
  • The need to carry out a “review and enhance” analysis of all current or envisaged processing in line with GDPR,
  • Understanding personal privacy rights,
  • How access requests will change,
  • What “legal basis” means in relation to collection and processing of data,
  • Using customer’s consent as a ground for processing data,
  • Processing Children’s Data,
  • Reporting Data Breaches,
  • New security breach Notifications,
  • Data Protection Impact Assessments (DPIAs) and Data Protection by Design and Default,
  • The Right to erasure (otherwise known as the right to be forgotten),
  • Data Portability.

Your Trainer – Susie Shine

Solicitor and Director of Training

Susie Shine is a solicitor, and Director of Training with La Touche Training. Susie has been working with La Touche Training since 2008 and has overall responsibility for design, development,...

Read Bio

Practical training with small groups to ensure quality.

Our training sessions are not lectures—they're practical, interactive experiences. The small group format allows every attendee to ask questions, take part in discussions involving practical exercises and role-plays.

This method of training allows attendees to put the skills learned into practice immediately. Course participants benefit from the focused attention and guidance of an independent expert.

The General Data Protection Regulation (GDPR) for Local Authorities

FAQs

Local authorities must process personal data lawfully, transparently, and securely in line with the Data Protection Act 2018 and the General Data Protection Regulation. This includes ensuring data minimisation, accountability, and appropriate safeguards for sensitive data.

This course is suitable for all local authority staff who handle personal data, including administrative staff, HR personnel, housing officers, IT teams, and senior management responsible for compliance.

Local authorities process large volumes of sensitive personal data, including housing, social services, and environmental records, making compliance essential to protect individuals’ rights and avoid regulatory penalties.

The Data Protection Officer oversees GDPR compliance, advises on data protection obligations, monitors internal practices, and acts as a point of contact with the Data Protection Commission.

This includes names, addresses, PPS numbers, housing application details, social care information, and sometimes special category data such as health or financial information.

Compliance can be achieved through staff training, clear data protection policies, secure data handling practices, regular audits, and implementing appropriate technical and organisational measures.

Breaches can result in investigations by the Data Protection Commission, reputational damage, potential fines, and legal claims from affected individuals.

Yes, the course typically addresses how to identify, report, and manage data breaches in line with GDPR requirements, including notification obligations.

While not explicitly mandated by law, GDPR training is strongly recommended to demonstrate accountability and ensure staff understand their responsibilities under data protection law.

Participants will gain a clearer understanding of GDPR principles, improved confidence in handling personal data, and practical guidance on maintaining compliance within a local authority environment.