UK
How you’d get it

How you’d get this certificate

  1. Zavmo teaches you. You learn the units one-to-one with an AI tutor, on your own work.
  2. You register with an approved centre. That is a college, training provider or employer NCFE has approved to offer this qualification. Zavmo is not an approved centre, so you register with them, not with us.
  3. The centre assesses, and NCFE awards. A qualified assessor at the centre judges your evidence, and the certificate comes from NCFE.

More on studying for a qualification

01What it is

This qualification is suitable for learners aged pre-16 and above. The purpose of this qualification is to allow learners to demonstrate understanding of data protection and data security. It will help learners progress to a work role where data protection and data security knowledge is required.

These are the units NCFE registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated. Zavmo teaches towards them on your own work, and work done here is recognised as prior learning under the agreements we hold.

Zavmo is not an awarding body, is not an approved centre, and is not affiliated with NCFE. It does the teaching and the mapping. NCFE sets this qualification and awards it, and a qualified human assessor makes the assessment decision.

Free first step

Try a free Future Fluency lesson first

The free part is a Future Fluency lesson on using AI at work. It is not part of this qualification. Next, a free account. We build your plan for this qualification as you set up. Teaching towards this qualification begins when you subscribe.

Try a free AI lesson

No card · Nothing to commit to

02The units

What each unit actually teaches you to do

Understand current data protection legislation Real unit · NCFE
You'll gain an understanding of the General Data Protection Regulation (GDPR), the Data Protection Act, and the Freedom of Information Act. The unit covers key definitions, principles, and the lawful basis for processing personal data to ensure compliance with data protection legislation.

What you'll be able to do

  • Understand the General Data Protection Regulation2. Understand the purpose of the Data Protection Act3. Understand the purpose of the Freedom of Information Act
Understand organisational procedures concerning data Real unit · NCFE
It teaches you to understand organisational procedures for data recording, storage, and disposal, alongside methods to maintain data confidentiality and security. You'll explore encryption techniques and their advantages and disadvantages to protect organisational data.

What you'll be able to do

  • Understand organisational procedures concerning data2. Understand procedures to maintain data confidentiality and security
Understand the consequences of not protecting data Real unit · NCFE
This unit covers the potential consequences of failing to protect data, including legal, reputational, and financial impacts on organisations. You'll also understand the effects of data breaches on individuals and the risks associated with sharing confidential information.

What you'll be able to do

  • Understand the potential consequences of not protecting data2. Understand the impact of data breaches on individuals
Understand threats to ICT systems and data Real unit · NCFE
You'll develop knowledge of common physical and electronic threats to ICT systems and data, including security vulnerabilities related to remote access. The unit also covers protective measures and personal data security, including an understanding of denial of service attacks and social engineering techniques.

What you'll be able to do

  • Know the common types of threat to ICT systems and data2. Know how to protect ICT systems3. Understand how to protect their own personal data and devices
03The standards

The national standards these units are built against

What the job actually needs, in the words employers and awarding bodies already use for the work itself.

  • Assist in implementing privacy and data protection

    Standard
04Where it leads

The jobs these credits are mapped to

A qualification is never a dead end here. Each of these is a job record this qualification is a mapped route into.

Showing 6 roles, drawn from 48 job records mapped to this qualification. Near-identical records are folded together, and each row says how many it stands for.

Where this can lead

Junior Data Protection Officer

This work can lead to a Senior Data Protection Officer role, or on to Privacy Program Manager.

See the whole journey
05The credits

The credits, and who awards them

Level 2 credits are regulated, and they are awarded by NCFE rather than by Zavmo. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you have covered and what is next.

What you would be collecting

Understand current data protection legislationUnderstand organisational procedures concerning dataUnderstand the consequences of not protecting dataUnderstand threats to ICT systems and data

Each one is a real unit registered against this qualification.

How you’d practise it

You don’t watch this. You do it.

You are not assessed on remembering this. You are assessed on applying it, analysing it, evaluating it and producing something. So that is what the practice is: projects, role play and your own live cases, with a tutor in the room.

The Practical Builder The Practical Builder · your make-it-real tutor Illustration
The Practical Builder Paste in the draft you have for “Understand organisational procedures concerning data”. Not a tidied one, the one you would actually send.
You It is mostly there. The recommendations section is thin.
The Practical Builder Thin is fine, vague is not. Take recommendation two and tell me who does what by when, then we will see if it survives.
The same lesson on the real thing: the conversation in the middle, the thinking ladder on the left, and the criteria each answer is evidencing on the right.
  • Draft the real one Create

    You do “Understand organisational procedures concerning data” on a real document of your own. Zavmo works on the draft you have to send anyway, so the coursework and the job are the same piece of work.

  • Map a live decision Analyse

    “Understand current data protection legislation” runs on a decision you are facing now. Zavmo maps it with you and shows what the second-order effect looks like before you find out the slow way.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Understand current data protection legislation, one of this qualification's own units.

Understand current data protection legislation Level 2

Applied to your work in any of these jobs

Which job do you mean?
Junior Data Protection OfficerAssociate Data Protection AssistantData Protection AnalystGDPR Compliance AssociateJunior Data Protection Compliance OfficerData Protection Compliance Officer

Learners will gain an understanding of the General Data Protection Regulation (GDPR), the Data Protection Act, and the Freedom of Information Act. The unit covers key definitions, principles, and the lawful basis for processing personal data to ensure compliance with data protection legislation.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time. Teaching towards this qualification begins when you subscribe.

Start learning, free
Your Plan Illustration

Built for NCFE Level 2 Certificate in Understanding Data Protection and Data Security

4 units in this credential, in the order it lists them, awarded by NCFE.

  1. Understand current data protection legislation
  2. Understand organisational procedures concerning data
  3. Understand the consequences of not protecting data
  4. Understand threats to ICT systems and data
These are the real units of this credential, in its own order. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

Free tools

Want a read on where you stand?

Three free tools, no account needed. Each one ends with a role, a level and a way in.

Read the Zavmo manifesto to understand how you will be taught Meet your tutors

Or try another one

Learned on your own work, taught one-to-one.

Everything you just read, learned one-to-one on the job you already do. Your free first module is Future Fluency, so you can see how the teaching works before you pay for anything.

Build my plan, free

No card. See how this qualification maps onto your role and meet the tutors who’d teach it, free. The learning begins when you subscribe. It’s £70 a month, billed monthly. Cancel any time and billing stops.

The title, level, credits, guided learning hours and unit learning outcomes on this page are taken from the Ofqual Register of Regulated Qualifications. Contains public sector information licensed under the Open Government Licence v3.0. Where this data comes from.