Introduction to data protection

Data protection can feel daunting, especially for small charities and community groups handling information about service users, volunteers, donors, staff and partners. This practical introductory session will help you understand your key responsibilities, reduce risk, and build confidence in managing personal information safely and lawfully.

Over 2.5 hours, we’ll explore:

• What data protection law means for small organisations – understand the basics of UK GDPR, the Data Protection Act 2018 and the Data Use and Access Act 2025, including what has changed and what has stayed the same.
• Recognising and handling personal data – identify personal and special category data, and consider simple ways to collect, store, share and delete it securely
• Lawful basis, consent and transparency – understand when consent is needed, when another lawful basis may apply, and how to explain your data practices clearly
• People’s rights and data protection requests – learn how to respond to requests, complaints or concerns from service users, staff, volunteers or supporters
• Policies, privacy notices and everyday good practice – review what your documents should include and how to make data protection part of routine work
• DUAA 2025 updates specifically relevant to charities – consider changes around complaints processes, cookies, automated decision-making, recognised legitimate interests and the new charitable purposes soft opt-in for some electronic marketing

This session is suitable for managers, trustees, project leads, communications staff and anyone else collecting or managing personal information in a charity or community setting.

This session will be delivered by superhighways