10 February 2026
Building Confidence Beyond the Basics: Data Protection Intermediate Certificate
By Jess Pembroke, Director of Information Law Services
After another energetic season of delivering our CPD UK accredited training, I’m delighted to share details of our Data Protection Intermediate Certificate, a programme designed for individuals who already have a grounding in data protection but want to deepen their confidence and practical capability in specific areas.
One of the things participants value most is flexibility. Each session can be attended as a standalone, or they can be combined to build the full Intermediate Certificate.
Below is an overview of some of the sessions that make up our programme.
Information Sharing, Data Processors & Contracts (next running 12 March, 9:30am–1pm)
We tackle the practicalities of sharing information lawfully and safely. We unpack when information can be shared, common myths, and how to assess risks fairly and transparently.
From there, we look closely at Data Processors, exploring what good due diligence looks like, how to review contracts, and the pitfalls organisations often stumble into when working with large software providers. An example I explore in this blog post Advanced Computer Software Fine: Are Poor Procurement Processes Really to Blame?,
Book this course or find out more
Privacy by Design (next running 22 April, 9:30am–1pm)
In this session, we explore how to embed privacy considerations into new processes, new software tools, and organisational change. Any Data Protection Officer (DPO) will tell you that implementing privacy considerations at ethe start of a project is much easier than trying to retrofit fairness, transparency, and accountability, and often completing a Data Protection Impact Assessment (DPIA) is a legal requirement[1]. In this session we use a mock DPIA to help delegates ask the right questions and think like a DPO.
Book this course or find out more
Data Protection Rights (next running 28 April, 9:30am–1pm)
Most people have heard of individuals asking for their personal data, but few (outside professional DPOs) have managed a request from start to finish. In this session, we navigate the complexities of handling rights requests, including verification, exemptions, timeframes, and communication with requestors. Real‑world examples help demystify what can feel like an intimidating process.[2]
Book this course or find out more
Information Security & Data Breach Management (next running 7 May, 9:30am–1pm)
Data breaches remain one of the most high pressure areas of data protection.
We explore incident assessment, internal escalation, and how to determine whether notification to the ICO or affected individuals is required, a topic that always sparks discussion, especially given how often breaches are misunderstood in practice.
We also walk through case studies, helping delegates recognise early warning signs and strengthen organisational response plans.
Book this course or find out more
AI and Data Protection Law: Privacy and Ethical Considerations (next running 9 June, 9:30am–1pm)
AI continues to be a hot topic in privacy and with all lots of organisational changes and uses of AI comes new ethical and legal considerations. In this module, we consider fairness, transparency obligations, purpose limitation in AI contexts. This session is ideal for anyone navigating modern technologies or supporting digital innovation within their organisation.
Book this course or find out more
Data Protection Intermediate Certificate
Each of these sessions stands confidently on its own, but when combined, they form a structured Intermediate Certificate in Data Protection designed to support professional practice.
Whether you’re looking to deepen your understanding of UK GDPR/Data Protection requirements, strengthen your own organisational compliance, or simply feel more confident in handling personal data, we’d be delighted to welcome you.
You can find more details — and book your place by clicking on this link. Any questions? Please get in touch at info@naomikorn.com and read our Training FAQs. We look forward to hearing from you!
[1] Data Protection Impact Assessments (DPIAs) | ICO
[2] DSAR Sins: From Illegal Deletion to Deadlines – Naomi Korn Associates