Data Protection Courses

[ElizabethBennetsBoots]

I'm thinking about the future and a potential move into data protection in the next few years. Currently a librarian with a background in data management advising research groups about gdpr and data issues, currently working in a more collections focused role. I've done some mandatory training recently and loved it, made me realise how interested I am in data management and data protection issues. My question is: does anyone know of the best most well recognised courses to do? I'm getting mightily confused online! I think I have a few years to think about it all but would like to start planning soon.

Is data protection actually a full time career? I've only worked for large companies and the in-house data protection officer is part of someone's role, not their entire job. Information security is a wider function and is an IT specialism in the IT department.

Councils generally have an information governance manager or officer who deals with freedom of Information as well as subject access requests

Look at the BCS courses, there is a Data Protection Practitioner which is the standard qualification needed for Data Protection work.

This one: www.bcs.org/qualifications-and-certifications/certifications-for-professionals/information-security-and-data-protection-certifications/bcs-practitioner-certificate-in-data-protection/

Although you will probably find most decent organisations will find this one for you.

@zzplex yes it is. Large organisations will have a Data Protection Officer as a full time role as a minimum. There are also roles dealing with data security, subject access and information governance. Lots of different roles to go into. Freedom of Information is another related role, there is another BCS course specifically for that area.

I wouldn't do BCS paying for it yourself - I did both the DP and FOI ones 10 years ago.

Better going with CIPP exams - CIPPE (Europe) and CIPPM (Management) and a lot cheaper. They accredit you as a privacy professional then. I'm probably out of date on the cippe one as I got out just before Brexit happened.

DP definitely a career, and quite well paid in some spheres, but usually expected to have a background/degree in a legal field. All police forces, universities, insurance companies, etc have compliance teams with DP professionals. And of course some DP services are bought in so consultants can provide that service.

Personally I hated it, after 6 years I was very glad to get out but my colleague loved it and was going from strength to strength.

It's been my full time career for 14 years!

I'm in a team of 8, we all work on data protection and related matters all the time!

OP, you don't 'need' to do a certification per se. It's useful if you don't have any experience at all but the best way to learn is to do the job. I don't have the qualification, but as I say, I've been doing this for 14 years.

Most entry level jobs might not pay enough though if you're already at a certain level. But if it's workable for you apply for those and get them to pay for the training.

I'd suggest checking out DPO Jobs account on LinkedIn for an idea of what's available and what they require.

For a lot of the jobs you'll be in the public sector or higher education.

And be aware that a DPO is likely to cease being a statutory requirement in the new Data Protection bill which is due to be enacted this year. Most of the work will still be needed, but a DPO won't be a legal requirement so some organisations might do away with them, or with bought-in DPO services.

Thanks everyone ☺️

When I started looking into courses, I was just as overwhelmed. One thing that really stood out to me was ISO 27001 Compliance & Certification Support. It's pretty well-recognized in the field and focuses on information security management systems. I've heard it’s a great way to get a solid foundation in data protection. The world of data management is evolving so fast, and having a certification like ISO 27001 can really set you apart. Plus, it covers so27001 compliance, which seems to be a crucial part of most data protection roles these days. I’m still exploring and planning my next steps, but I wanted to share this because it sounds like it might be right up your alley too.

I’m head of data protection for a global financial firm based in the City, and it is very definitely a full time job, with circa 20 full time DP specialists on the team!

I did my ISEB with Amberhawk many years ago. There’s no ISEB equivalent (yet) for the GDPR, but I would definitely recommend the courses they run. As another poster said though, training isn’t cheap, ideally it will be paid for by an employer. Starting salaries in my sector for someone trained and with about 2 years experience are about £60k. Well they are in London, £40-£50k outside London. We don’t take anyone with leas than 2 years experience, ideally 3, and a law degree is usual but not vital. Relevant experience is really key. Even with 3-5 years experience people have a lot to learn. Might your current employer be willing to pay for your training? Do they have a DP team you could move sideways into?

PS Op, being passionate about data protection is a winning trait! We all are on my team, and it’s brilliant! You meet some lovely people, and it’s a fascinating field to work in 😊

Thanks all. I've actually been offered an ad hoc role as an end point assessor for apprenticeships so am doing the CAVA course instead, which is also fascinating, and I hope will lead to more things.

The ico have training on their website ico.org.uk/training