This Website Uses Cookies. Cookies are small text files held on your computer. Cookies will never contain any personally identifiable information. You can delete and block cookies but parts of our site may not work without them. We use cookies in order to deliver the best possible service to you and to provide a secure and effective site service for users. By using this site, you agree that we may store and access cookies on your device. To find out more about how we use cookies and also how you can change your cookie settings, click here.

Hide this message

Data Protection

Print page

This module sets out essential knowledge relating to data protection concepts and principles, data subject rights, the implementation of data protection policies and measures, and regulatory compliance.


The Syllabus sets out the specific knowledge and skills that make up this module, as informed by input from a wide range of experts from the world's leading computer societies and independent subject matter experts.

Download the Data Protection Module Syllabus (PDF)

On completion of this module the candidate will be able to:

  • Understand concepts relating to personal data and its protection.

  • Understand the rationale, objectives, and scope of the European Union General Data Protection Regulation (GDPR).

  • Outline the key principles of the GDPR relating to the lawful processing of personal data.

  • Understand the rights of data subjects and how they are upheld.

  • Understand that company policies and methods should comply with data protection regulations, and outline key technical and organisational measures to achieve this.

  • Understand how to respond to data breaches and the consequences of not complying with data protection regulations.

What are the benefits of this module?

  • Creates awareness of the principles of data protection.

  • Develops a practical understanding of how to protect personal data.

  • Supports your organisation’s need to be compliant with the GDPR.

  • Sets out your rights as a data subject.

  • Relevant for organisations inside and outside Europe.

  • Developed with input from subject matter experts and practising professionals

Syllabus Overview

  • Personal Data
  • Protecting Personal Data
GDPR Overview
  • Rationale and Objectives
  • Scope
  • Processing Personal Data
  • Lawfulness of Processing
Data Subject Rights
  • Facilitate Rights
  • Exercise Rights
  • Policies and Methods
  • Measures
  • Data Breaches 
  • Enforcement

Sample Tests

ECDL Foundation provides sample tests to enable potential candidates and employers to understand ECDL Data Protection in more depth and prepare for testing.