GDPR and Confidentiality in Care Settings

About this course

This course explains how UK GDPR, the Data Protection Act 2018 and the duty of confidence apply to everyday care and support work, including the changes made by the Data (Use and Access) Act 2025. It covers what counts as personal information, the rules for using and recording it, confidentiality in conversations, calls and messages, when information can be shared, and what to do about requests for records, security risks and data breaches. Five modules, eighteen lessons, around two hours, finishing with an assessment and a SupportiveBridge certificate.

What you'll learn

• By the end of this module, you will be able to explain what counts as personal and confidential information in care work, which laws protect it, and who is responsible for it in your service.
• By the end of this module, you will be able to describe the seven data protection principles, explain why care services are allowed to use personal information, and keep records that are accurate, complete and legible.
• By the end of this module, you will be able to describe what confidentiality means in your role, apply the Caldicott Principles, and protect people's privacy in conversations, calls, visits, messages and social media.
• By the end of this module, you will be able to explain when confidential information can and should be shared, decide who may receive it, record your decision, and ask for advice when you are unsure.
• By the end of this module, you will be able to explain people's rights over their information, recognise a request for records or a data protection complaint, keep information secure, and report a breach or a risk to data security quickly.

Curriculum

Assessment & certificate