This professional certification will not be refreshed in January 2024; we plan to refresh following the DPDI Bill.

Who is it for?

  • Anyone who has some existing responsibility for data protection within their organisation.
  • It’s also useful for those who want to broaden their basic understanding in this area and fully understand the practical applications of data protection laws.
  • Whilst this certificate is written to the UK Data Protection Act, many other jurisdictions have enacted broadly similar data protection laws, so international candidates may also find this useful.

Entry requirements

  • It's ideal if you hold the BCS Foundation Certificate in Data Protection, though this is not mandatory.
  • We strongly recommended that candidates attend an accredited training course and are fully familiar with GDPR and the syllabus and any recommended reading outlined in the syllabus.

What will I learn?

Candidates will be able to:

  • Gain an understanding of the key changes and the associated implications that the GDPR and the UK Data Protection Act 2018 introduce to data protection.
  • Gain an understanding of individual and organisational responsibilities under the GDPR and the UK Data Protection Act, particularly the need for effective record keeping.
  • Be able to apply the new rights available to data subjects and understand the implications of those rights.
  • Be able to demonstrate an understanding of the designation, position and role / tasks of a data protection officer.
  • Be able to prepare organisations to manage and handle personal data in compliance with the GDPR and the UK Data Protection Act.

The syllabus includes training objectives, details of modules and learning hours, plus a recommended reading list:

Download our latest syllabus (PDF)

Download the specimen paper (PDF)

Please note: This certification has been refreshed in line with legislative updates up to 30 April 2023.

Any legislative changes since 1st May 2023 will be reflected at the earliest opportunity following the passing of the DPDI Bill.

How do I get this certification?

Training and exam (recommended)

Take this course with one of our accredited training providers.

How long will it take?

Classroom courses usually last between three and five days dependent on training provider.

Where can I study?

At a BCS accredited training provider near you.

How much does it cost?

Course prices vary depending on your chosen training provider and course format.

Find a provider

Exam only (self study)

Ideal if you’re self-motivated and already know something about data protection.

How do I book an exam?

Call +44 (0)1793 417417 to book your exam.

How long will it take?

It usually takes between 20 to 40 hours dependent on experience.

Where do I sit my exam?

At any Pearson VUE test centre across the world. If you're studying for this qualification without a training provider you can sit this exam directly with BCS.

How much does it cost?

UK price: £264 (£220 + VAT).
International prices may vary by region, please check international pricing via our Customer Service team.

Contact us on +44 (0)1793 417417

What format is the exam?

  • A 90 minute closed book digital 40 question multi-choice exam
  • Pass mark is 65%

This qualification is not regulated by the following United Kingdom Regulators - Ofqual, Qualifications Wales, CCEA Regulation or SQA.