ICDL Data Protection (ICDL) study guide
ICDL Data Protection · Work through your exam, one topic at a time.
ICDL Data Protection is an ICDL Professional module for people whose work involves handling personal data. The module description states that it covers data protection concepts and principles, data subject rights, data protection policies and measures, and regulatory compliance, and that it develops the skills needed to manage and process personal data in the context of GDPR. ICDL notes the module is relevant for organisations inside and outside the European Union, and that an understanding of data protection concepts is increasingly valued by employers. The published skill sets group the content into four areas: Concepts (personal data, protecting personal data, GDPR overview, rationale and objectives, scope, principles), Processing personal data (lawfulness of processing), Data subject rights (facilitate rights, exercise rights), and Implementation (policies and methods, measures, compliance, data breaches, enforcement). The ICDL Data Protection study guide has 4 sections and about 1,095 words.
01Core Concepts of Data Protection
Data protection law governs how organisations may collect, use, share and keep information about identifiable people. The protected object is the personal data ; the protected person is the data subject .
295 words, about 1 min02Lawful Processing of Personal Data
Processing must rest on a legal basis and follow core principles. Typical principles: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability (the organisation must be able to prove compliance).
260 words, about 1 min03Data Subject Rights
Individuals have a set of enforceable rights over their data: Right to be informed - via privacy notices. Right of access - a copy of their data (subject access request).
267 words, about 1 min04Implementing Data Protection in Practice
Implementation turns rules into everyday practice. Candidates should recognise the main organisational measures: Records of processing - a register of what data is held, why, and where.
273 words, about 1 min