Independent online training and certification for the workplaceCertificate register

Course and certificate

GDPR for Staff (Ireland)

For anyone in Ireland who handles personal data at work: office and admin staff, retail and hospitality teams, health and care workers, school and public-sector staff. Eight short lessons in plain English explain the GDPR and the Data Protection Act 2018, personal and special category data, the seven principles, lawful bases, consent, children and marketing, people's rights and subject access requests, everyday security, personal data breaches and the 72-hour rule, employee monitoring and PPS numbers, and the Data Protection Commission's powers and fines, followed by a 25-question test.

Start the course
Jurisdiction
🇮🇪 Ireland
Languages
English, Español, Polski, Português, Română, Українська
Lessons
8
Time needed
About 50 minutes for the lessons and the test
Assessment
25 questions, pass mark 80%
Refresher
Recommended after 2 years
Content updated
27 October 2026
Certificate fee
€12.00, payable after passing

01Who this course is for

  • Office, admin and reception staff
  • Retail, hospitality and customer service teams
  • Nurses, carers and health service workers
  • School, college and public-sector staff
  • HR, finance and marketing staff
  • Anyone starting a job in Ireland where customer, patient or staff data is used

02Syllabus

  1. 01What data protection law is and who it covers
  2. 02The seven principles
  3. 03Lawful bases, consent, children and marketing
  4. 04People's rights and subject access requests
  5. 05Keeping personal data secure at work
  6. 06Personal data breaches
  7. 07Employee data, monitoring and PPS numbers
  8. 08The DPC, fines and your role

03Assessment

25 multiple-choice questions drawn from the whole course. The pass mark is 80%. The test is free and can be retaken as often as needed; wrong answers point to the lesson to read again.

04The certificate

  • With your name, your score and the date you passed.
  • A unique number, recorded in our register.
  • Your employer or an inspector scans it to see that it is genuine.
  • Download it, print it or show it on your phone.

05Sources

The course follows the published guidance below. We are not affiliated with the bodies that publish it.

  • GDPR Article 32
  • GDPR Article 15
  • GDPR Article 12(3)
  • GDPR Article 33
  • DPC
  • GDPR Article 5(1)(f)

06Questions

Do I need data protection training to work with personal data in Ireland?

The GDPR requires organisations to take appropriate security measures and to make sure that staff with access to personal data use it only on the organisation's instructions (Article 32). Training is a common way to do this, but the law does not name a particular course or certificate.

Is this certificate accredited, or approved by the DPC or QQI?

No. This course is not approved or recognised by the DPC, QQI or any other body. It is a certificate of completion: it shows you finished this general GDPR course and passed its test. It is not a regulated or accredited qualification or a QQI award, and your employer decides whether this training meets their needs.

Does this course replace the training my employer must give me?

No. It teaches the general rules that apply in any Irish workplace. Your employer must still give you its own data protection policies, privacy notices, breach and rights-request procedures, and instruction for your role, for example in HR, marketing, health or customer service. Many organisations must also keep records of their processing, and public bodies must have a data protection officer, whose contact details you should be given.

Is this the UK GDPR?

No. Ireland applies the EU GDPR together with the Data Protection Act 2018. The course teaches the Irish rules, including the Data Protection Commission, the age of digital consent of 16 and fines for public bodies. If you work in the UK, take the UK GDPR course instead.

Does the course cover the Freedom of Information Act 2014?

Only in outline, for staff of public bodies. It explains how FOI differs from a data protection request and what to do if one reaches you. It does not train FOI officers.

How long does it take?

Most people finish the lessons and the 25-question test in about an hour. You can stop and come back at any time on the same device.

What if I fail the test?

Nothing is charged. You see which lessons to read again and can retake the test as often as you need.

When do I pay, and how much?

Only after you pass: €12 for the certificate. The course and the test are free.

How does my employer check the certificate?

Every certificate has a number and a QR code. Scanning it, or entering the number on our check page, shows your name, the course and the date you passed.

How long is the certificate valid?

No law sets an expiry date for this kind of awareness training. Refresher training about every one to two years is common practice, so the certificate shows a renewal date 24 months after you pass. Check what your employer requires.

The certificate confirms that you completed this course and passed its test. It is not a regulated or accredited qualification; your employer decides whether this training meets their requirements.