Data Protection


UCL Data Protection Refresher Training

This page provides UCL staff, contractors and PhD students with details on how to access UCLs online Data Protection refresher training.

Please note: If you wish to leave the course and resume at a later stage, you must click on the grey X in the top right-hand corner of the training module to ensure your progress is saved before you close the broswer. 

Mac Users please note: There have been a small number of reports of the sound of the course videos and/or the course not loading in Safari. We are exploring this issue and hope to have a resolution soon but if you experience difficulties please contact the Data Protection Team to log this, and then please attempt the training in another browser (Chrome, IE or Firefox). If you do not have access to these, please access the training via desktop@ucl

For all UCL staff and other representatives 

Please click on the this link to access the training - GDPR online training refresher course (Staff, contractors and students)

Please follow these instructions to enrol on the course:
1. Click on the link above to access the training
2. Login with your UCL credentials (User ID: ccxxxx and Password)
3. Click on the down arrow next to 'dashboard' in the top left hand side of the page and select 'catalogue'
4. Search for 'refresher' and select 'GDPR online training refresher course'
5. Click 'enrol'
6. Click 'Yes'
7. Click 'Start' to begin
For a copy of the instructions with screenshots please click on this link - 


UCL Data Protection Refresher Training - accesibility

The training is an online assesment only. If you require an accesible version of the assesment please contact the GDPR team using gdpr@ucl.ac.uk

Your personal data will be processed in accordance with the following privacy notice:

Frequently Asked Questions (FAQ):

I am unable to log in to UCL single sign-on (using my UCL username and password)

Please ensure that you have read the instructions on the UCL single sign-on page. If you are still unable to log in you may need to reset your password. 

I do not know my UCL user ID

If you do not know your UCL userID you need to contact your computer rep and discuss this with them. A list of computer reps by the department. (Your UCL user ID is also your UCL username and password)

I have forgotten my UCL password

You will need to reset your password.

I am unable to find the course

If you are still unable to access the training course please contact the GPDR team.

I started the course, but want to continue on another device, can I do so?

Yes. If you leave the course part way through you can resume it on another device/platform. You will need to login the same way that you did the first time, and you will receive a notification asking if you would like to resume the course; select yes, and you will re-start where you left off.

I am having difficulty understanding the questions in the course.

Please contact the GDPR team to discuss further.

Can I partially complete and return to the course on another day?

Yes. You can leave the course part way and resume it at another time to suit you. You will need to login the same way that you did the first time, and you will receive a notification asking if you would like to resume the course; select yes, and you will start where you left off.

Will my completion of the course be recorded and reported?

Yes, please refer to the privacy notice at the top of this page for further details.

Why do we need to complete information compliance training?

UCL and its staff have an obligation to treat personal data with the care and respect that it deserves. This training has been developed to enable staff to meet the higher standards of compliance imposed by the new data protection legislation. In an age when the penalties for breaches of data protection legislation can run into millions of pounds and key business partners can refuse to work with us if we do not take information compliance seriously, this obligation has become increasingly important since GDPR came into effect. So for both business and compliance reasons UCL needs to be able to demonstrate that all staff have been trained in data protection.

Is the training mandatory?


Who should complete the training?

All part-time and full-time staff, contract (associate staff) as well as honorary staff and PhD students.

I have completed information compliance training at another organisation - do I still have to take the training?

Yes, the training is a mandatory requirement for staff and students that fall within scope.