UK

United Kingdom · Compliance, quality and safety · Principal/Manager (12-16 years)

Data Protection Officer (DPO) Manager

Here is the whole job, in plain words. What it is, what you decide, how you're judged, how people get here and where they go next. Then the part no course gives you: twelve AI tutors who learn your work.

See how AI is changing this job, and get the full read by email.

Start my free Data Fluency module

As a Data Protection Officer (DPO) Manager, a good place to start on Data Ethics & Responsible AI Governance is Using Data to Direct a Department's Priorities, a free Future Fluency module at Level 5. You'd practise using the data your department already produces to decide where its effort should go.

Free to start, no card.

Keep this job description

Where should we send it?

One email: what AI is changing in this job, the new skills it asks for, where it leads, and where to start free. With a link back here. Nothing else follows unless you confirm your address.

Your employer, or 'self-employed'

Leading a team? Try this with up to five of them for 14 days, free.

  • Experience bandPrincipal/Manager (12-16 years)
  • Direct reports5-10 reports
  • Reports toDirector of Data Protection & Privacy
  • UK framework levelUsually someone running a function, or a director

Also advertised as Principal Data Protection Officer · Head of Privacy Operations · Senior Privacy Manager

Built on 43,079 real UK job descriptions we analysed · grounded in what real qualifications cover

Two short quizzes about you

1From this job to a course

The qualifications matched to this job

SFJ Awards Level 5 Certificate in Police Management SFJ Awards · Level 5 · covers 1 of 8 standards
AIM Qualifications Level 2 Diploma in Employability and Development Skills AIM Qualifications · Level 2 · covers 6 of 8 standards
iCQ Level 2 Certificate in Data Protection and Data Security Principles iCan Qualifications Limited · Level 2 · covers 5 of 8 standards
AIM Qualifications Level 2 Certificate in Employability and Development Skills AIM Qualifications · Level 2 · covers 5 of 8 standards
AIM Qualifications Level 2 Certificate in Preparation for Work and Study AIM Qualifications · Level 2 · covers 5 of 8 standards

Matched from the standards this job is measured against: a suggestion, not an official ruling.

The units you would start with

Obtain, analyse and provide information to support decision making SFJ Awards Level 5 Certificate in Police Management
Data Protection and Confidentiality in a Working Environment AIM Qualifications Level 2 Diploma in Employability and Development Skills
Understanding data protection legislation iCQ Level 2 Certificate in Data Protection and Data Security Principles
Data Protection Open Awards Level 3 Certificate in Skills for Managing Independent Travel Training Programmes (RQF)

The future skills this job leans on

AI Fluency working with AI as a thinking partner
Data Fluency turning numbers into a decision
AI Governance Fluency using AI responsibly
Systems Fluency seeing the whole picture
Trust Fluency keeping the digital world safe
Your Plan Illustration

Built for Data Protection Officer (DPO) Manager

4 units that map to this job, from the qualifications that cover it.

  1. Obtain, analyse and provide information to support decision making SFJ Awards · covers 1 of 8 standards Level 5
  2. Data Protection and Confidentiality in a Working Environment AIM Qualifications · covers 6 of 8 standards Level 2
  3. Understanding data protection legislation iCan Qualifications Limited · covers 5 of 8 standards Level 2
  4. Data Protection Open Awards · covers 3 of 8 standards Level 3
These are the real units behind this job, in the order they rank for it. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

2AI and this work

Will AI change your work as a Data Protection Officer (DPO) Manager?

Nobody can say exactly how. Here is what this job is being asked for next, and where to start.

The new skills this role is being asked for

  • Data Ethics & Responsible AI Governance
  • Advanced Privacy Engineering & PETs (Privacy Enhancing Technologies)
Why each one is rising

The future skills this job leans on

We'll only ever tell you what we can actually back up. No hype, no scare tactics.

What happens when you start

Next, a free account. We build your Data Protection Officer (DPO) Manager plan as you set up, starting with the free Data Fluency module. No card.

Your first Future Fluency module is free. After that, your AI tutor is £70 a month.

Ready to pay? Subscribe for £70 a month

Keep this read. One email with what AI is changing in this job, the new skills it asks for and where to start free. Nothing else follows unless you confirm your address.

3What this role really is

A DPO Manager leads a team that runs an organisation's data protection programme, making sure it works day-to-day across the business.

4What you'd actually use

The tools this job runs on, and how well you'd need to know each one.

OneTrust Strategic/Architect

Leading platform configuration, defining enterprise-wide data governance rules within the tool, integrating with other enterprise systems, and ensuring your team uses it effectively for DSARs, DPIAs, and RoPA.

ServiceNow GRC Strategic/Architect

Owning the GRC privacy module, presenting risk dashboards to leadership, aligning the platform's capabilities with overall enterprise risk strategy, and overseeing your team's use for incident logging and compliance reporting.

BigID / Collibra (or similar Data Discovery/Governance) Strategic/Architect

Architecting the enterprise data discovery and governance strategy, securing budget for platform expansion, demonstrating ROI to the board, and guiding your team on data classification policies and data catalogue creation.

Intelex / Cority (EHSQ Platforms) Advanced

Setting the data governance policy for all EHSQ data, negotiating DPAs with platform vendors, and overseeing DPIAs on new EHSQ module implementations, particularly for employee health records.

Confluence / SharePoint Advanced

Establishing the enterprise-wide documentation and knowledge management strategy for all compliance functions, ensuring privacy policies are accessible, accurate, and version-controlled. You'll ensure your team uses these effectively.

Diligent Boards / BoardVantage Advanced

Directly creating and presenting quarterly privacy risk posture reports, breach trend analysis, and regulatory updates to the board and audit committee. This means distilling complex information into executive-ready insights.

5What you get to decide, and how that grows

Power in a job isn't your title. It's what you're allowed to decide. Here's how it grows as you move up.

The choiceComing in Where you are nowThe step above
Team Hiring & Performance Management Assists with interview scheduling, provides feedback on junior candidates. Participates in interviews, provides detailed feedback, helps onboard new team members. Leads the hiring process for DPOs and Analysts, makes final hiring recommendations, conducts performance reviews, manages team development plans.
Programme Budget Allocation Identifies potential cost savings in daily tasks, flags budget overruns. Proposes cost-effective solutions for specific projects, tracks project-level spend. Manages the annual budget for the data protection function (up to £500K), allocates resources across projects, approves expenses within delegated authority.
Privacy Tooling & Vendor Selection Uses existing tools, flags issues or feature requests. Researches alternative tools for specific problems, provides input on vendor capabilities. Evaluates new privacy technologies, leads vendor selection processes (up to £100K), negotiates contracts with legal support, oversees implementation and integration.
Regulatory Response & Communication Drafts internal summaries of regulatory guidance, logs minor inquiries. Drafts responses to routine regulatory inquiries, prepares internal briefing notes. Leads the response to significant regulatory inquiries or investigations, acts as primary contact with Supervisory Authorities, approves formal communications with regulators (with legal review).
Data Protection Impact Assessment (DPIA) Approval Contributes data and analysis to DPIAs, flags missing information. Leads standard DPIAs, recommends mitigation strategies, presents findings to project teams. Reviews and approves high-risk DPIAs, signs off on risk acceptance decisions, escalates residual risks to senior leadership where necessary.

6How you'll be judged

The scoreboard, and what is not on it. The hard targets, how often each is actually looked at, and the quiet signals that never reach a dashboard.

Regulatory Fines Avoided
The total value of potential or actual regulatory fines that were successfully mitigated or avoided due to proactive programme management and incident response.
Target · Zero fines from Supervisory Authorities.

Successfully navigating a regulatory inquiry into a minor incident, resulting in no formal enforcement action or financial penalty, saving the business £500K-£2M.

Privacy Maturity Level Improvement
Progress against a recognised privacy framework (e.g., NIST Privacy Framework, ISO 27701).
Target · Improve NIST Privacy Framework maturity score from 'Partial' to 'Risk Informed' within 24 months for your functional area.

Moving from ad-hoc DPIA processes to a fully embedded, automated workflow with 90% completion rate and clear risk acceptance criteria.

Team DSAR & DPIA Efficiency
The average time taken by your team to complete Data Subject Access Requests (DSARs) and Data Protection Impact Assessments (DPIAs), reflecting operational efficiency.
Target · Average DSAR closure time < 20 days; average high-risk DPIA completion < 30 days.

Your team consistently closes 95% of DSARs within the 20-day target, even during peak periods, and reduces DPIA bottlenecks by 15% through process optimisation.

Privacy Incident Reduction (Preventable)
The year-over-year reduction in privacy incidents classified as 'preventable' through improved controls, training, and awareness.
Target · 20% year-over-year reduction in preventable privacy incidents.

After implementing a new training module and control, a specific type of employee data mishandling incident drops from 10 per quarter to 8.

Stakeholder Confidence & Trust
How much the business trusts your team's advice and proactively involves privacy in new initiatives.
  • Your team is consistently consulted early in project lifecycles
  • Product and Marketing seek out your advice before launching new features
  • senior leaders reference your team's guidance in their own communications
  • positive feedback in annual stakeholder surveys.
Team Development & Engagement
The growth, morale, and retention of your direct reports.
  • Low team turnover
  • direct reports achieving professional certifications
  • positive feedback in 1:1s and performance reviews
  • your team members are seen as internal experts and mentors
  • they're actively contributing to process improvements.
Strategic Influence
Your ability to shape business decisions to incorporate privacy by design principles, rather than being an afterthought.
  • Privacy requirements are embedded into project charters from day one
  • budget is allocated for privacy-enhancing technologies
  • you're regularly invited to strategic planning meetings, not just compliance reviews
  • your recommendations are consistently adopted by senior leadership.
Regulatory Relationship Management
The quality and effectiveness of our engagement with Supervisory Authorities.
  • Proactive and transparent communication with regulators
  • inquiries are handled professionally and promptly
  • no escalations from regulators regarding unaddressed issues
  • positive feedback from external legal counsel on regulatory interactions.

7Would you like it

Both sides. What people enjoy, and what grinds them down.

What people enjoy
Building and Leading a High-Performing Team

You'll spend time mentoring your DPOs, celebrating their successes, and helping them navigate tricky situations. You'll get a real buzz from seeing them grow and take on more complex challenges.

Seeing a junior DPO you've mentored successfully lead their first major DPIA from start to finish, or watching your team collaborate seamlessly on a complex incident response.

Shaping Strategic Direction

You'll be involved in discussions about new product launches, market expansions, and technology investments, ensuring privacy is considered from the outset. You'll influence how we approach data, not just react to it.

Successfully advocating for privacy-by-design principles to be embedded in the roadmap for a new customer-facing application, preventing costly re-work later.

Protecting the Business and its Customers

The core of your role is safeguarding our organisation from regulatory fines, reputational damage, and ultimately, ensuring customer trust. You'll feel a deep sense of responsibility for this protection.

Successfully guiding the business through a complex regulatory inquiry with no adverse findings, or mitigating a potential breach before it escalates, knowing you've protected our customers' data.

What frustrates people
  • The constant tension between business agility and compliance rigour.
  • Translating ambiguous legal principles into concrete, actionable technical requirements for engineering teams.
  • Securing budget for proactive privacy measures when the business is focused on revenue growth.
  • Dealing with internal resistance to change or a lack of understanding about privacy risks.
  • Managing a high volume of complex data subject rights requests under tight deadlines.
What this role does not give you
  • A purely technical, heads-down coding role.
  • A role where you're always the most popular person in the room.
  • A static environment where regulatory requirements never change.
  • An opportunity to avoid difficult conversations or challenging senior stakeholders.

8Who you work with

This role directly impacts our regulatory compliance posture, brand reputation, and ability to innovate responsibly. Your team's effectiveness prevents significant financial penalties (think millions of pounds), avoids costly litigation, and maintains customer trust, which is, let's be honest, priceless in today's data-driven world. You're safeguarding the business's future.

Inside the business
  • Director of Data Protection & Privacy
  • Head of IT Security
  • General Counsel
  • Product Leadership
  • Marketing Director
  • HR Director
  • Internal Audit
Outside the business
  • Information Commissioner's Office (ICO) and other Supervisory Authorities
  • External Legal Counsel
  • Third-party auditors and assurance providers
  • Key vendors and data processors

9What you need before you start

Not a wish list. The things you would be expected to already have.

  • A proven track record of 12-16 years in data protection and privacy roles, with at least 5 years in a leadership or managerial capacity.
  • Demonstrable experience in designing, implementing, and managing an enterprise-wide data protection programme.
  • Expert-level understanding of GDPR and other relevant privacy regulations (e.g., HIPAA, ePrivacy).
  • Experience leading and mentoring a team of privacy professionals, with a focus on their development and performance.
  • Strong experience in managing data breach incidents and engaging with Supervisory Authorities.
  • A solid understanding of information security principles and how they intersect with privacy.
  • Excellent communication and influencing skills, with the ability to engage effectively with all levels of an organisation, including C-suite and Board members.

10What to practise next

Where the job is going, and what to do about it starting this week.

Global Regulatory Horizon Scanning & Impact Assessment

The patchwork of global privacy laws is only getting more complex. You'll need to develop a systematic approach to monitor emerging legislation worldwide, assess its potential impact on our global operations, and proactively adapt our programme. This isn't just about GDPR anymore.

Privacy Shield Frameworks · One-Stop-Shop Mechanism · Extraterritorial Reach of Laws · Regulatory Enforcement Trends

  • This quarter: Subscribe to key global privacy news feeds and regulatory updates (e.g., IAPP, OneTrust blogs).
  • Next 3 months: Identify our top 3-5 global markets and research their specific privacy laws beyond GDPR.
  • Month 4-6: Develop a simple 'regulatory impact assessment' template for your team to use when new laws emerge.
  • Month 7-9: Present a quarterly 'Global Privacy Horizon Report' to senior leadership, outlining key risks and opportunities.

Quick win: Start by setting up Google Alerts for 'data protection law' + [key countries]. Encourage your team to share interesting regulatory news during weekly stand-ups.

11Staying current once you are in

What people here do to keep up
  • Active participation in privacy industry forums and associations (e.g., IAPP local chapters, Privacy Law Bar Associations).
  • Regularly attending privacy conferences and webinars to stay abreast of regulatory changes and emerging best practices.
  • Contributing to thought leadership through articles, blog posts, or presentations on privacy topics.
  • Mentoring junior privacy professionals, either formally or informally, to foster the next generation of talent.

12The rising capability

The rising capability

Zavmo analysis

What's rising in its place

This is where the work is heading, and the higher pay with it. Get fluent here and the shift stops being a threat and starts being your edge.

Data Ethics & Responsible AI Governance

As AI becomes more pervasive, the ethical implications of its use (bias, fairness, transparency) are moving beyond academic debate into regulatory focus. Regulators are increasingly looking at 'responsible AI' frameworks, and businesses need to demonstrate ethical decision-making, not just legal compliance.

  • AI Act (EU)
  • Algorithmic Bias Detection & Mitigation
  • AI Explainability (XAI)
  • Data Governance for AI

Advanced Privacy Engineering & PETs (Privacy Enhancing Technologies)

Regulators are increasingly expecting businesses to go beyond basic controls and implement advanced technical measures to protect data. Simply having a DPA isn't enough; you need to understand how privacy is engineered into systems and what cutting-edge tools can offer.

  • Homomorphic Encryption
  • Differential Privacy
  • Zero-Knowledge Proofs
  • Federated Learning

13What you’ll use

What you’ll use

Skills this role draws on

Technical

  • Data Protection Impact Assessments (DPIAs) & Privacy by Design (PbD)
  • Regulatory Framework Analysis & Application (Global)
  • Data Subject Access Request (DSAR) & Rights Management Programme
  • Incident Response & Breach Notification Leadership
  • Records of Processing Activities (RoPA) Management & Audit
  • Third-Party Risk Management (TPRM) & International Transfers

14The pathway

The pathway

How you actually get there, here

How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.

  1. 1

    Senior Data Protection Officer (L3)

    3-5 years as a Senior DPO.

    Skills to master

    • Leading complex DPIAs, managing breach incidents end-to-end, mentoring junior team members, and building strong cross-functional relationships. You'll need to demonstrate a clear aptitude for leadership and strategic thinking.

    You're ready to move on when

    • Consistently delivering high-quality, impactful privacy advice and solutions.
    • Proactively identifying and mitigating privacy risks across multiple projects.
    • Successfully leading significant privacy projects with minimal supervision.
    • Demonstrating strong communication and influencing skills with senior stakeholders.
    • Taking initiative to develop and mentor other team members.
  2. 2

    Privacy Consultant (External)

    5-8 years in a senior privacy consulting role.

    Skills to master

    • Managing multiple client engagements, developing privacy programmes for diverse organisations, strong client relationship management, and translating complex legal requirements into practical business solutions. You'll bring a breadth of experience from different industries.

    You're ready to move on when

    • Successfully leading complex privacy projects for various clients.
    • Demonstrating expertise in a range of privacy frameworks and industries.
    • Strong track record of client satisfaction and delivering tangible results.
    • Ability to manage project budgets and timelines effectively.
    • Proven ability to build and maintain strong professional networks.
  3. 3

    Legal Counsel (Privacy Specialism)

    5-7 years as a dedicated privacy lawyer in-house or at a law firm.

    Skills to master

    • Deep legal interpretation of privacy laws, drafting and negotiating DPAs, advising on complex regulatory inquiries, and managing privacy litigation. You'll need to develop a strong operational understanding of how privacy translates into day-to-day business processes.

    You're ready to move on when

    • Providing expert legal advice on complex privacy matters.
    • Successfully negotiating and drafting critical privacy-related contracts.
    • Managing regulatory inquiries and investigations effectively.
    • Demonstrating a practical, business-oriented approach to legal advice.
    • Building strong relationships with business stakeholders.

15Where this role leads

The long view: This role can lead to Chief Privacy Officer, Chief Compliance Officer or General Counsel with a privacy specialism, taking on wider legal or risk responsibility.

The ten Future Fluencies

Zavmo analysis

The credential is what you can do today. These are what keep you valuable.

A qualification proves you can do the job as it's defined today. These ten are what decide whether you're still the obvious person for it in five years. They're the capabilities employers are now writing into senior roles faster than people are learning them. Zavmo weaves them through whatever you study, so you come out with both: the credential and the fluency.

The highlighted ones are the Fluencies your role leans on hardest, from how Data Protection Officer (DPO) Manager is actually changing.

Where it leads

Roles this leads to

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Obtain, analyse and provide information to support decision making, worked against Data Protection Officer (DPO) Manager.

Obtain, analyse and provide information to support decision making Level 5

Applied to your work in Data Protection Officer (DPO) Manager

This unit aims to provide learners with the knowledge and skills to effectively obtain and analyse information from various sources, ensuring compliance with legal and organisational requirements. Upon completion, learners will be able to provide information to support informed decision-making processes within an organisation.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time.

See Your Progress Grow Illustration
Data Protection Officer (DPO) Manager
  • Data Protection Impact Assessments (DPIAs) & Privacy by Design (PbD)
  • Regulatory Framework Analysis & Application (Global)
  • Data Subject Access Request (DSAR) & Rights Management Programme
  • Incident Response & Breach Notification Leadership
  • Records of Processing Activities (RoPA) Management & Audit
  • Third-Party Risk Management (TPRM) & International Transfers
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

16The detail, folded away

Everything else the record holds

The career branches in full, how AI is already showing up in the day-to-day, and the questions people ask about this job. Here when you want them, out of the way while you decide.

Where it leads next, rung by rung

Where it leads

The career path, and where it branches

Data Protection Officer (DPO) Manager is a start, not a ceiling. Each step below asks for new skills and hands back more autonomy.

  1. Director of Data Protection & Privacy (L6)

    3-5 years as a DPO Manager.

    This is a significant step up, moving from managing a function to shaping the multi-year privacy strategy for the entire business. You'll report directly to the C-suite or Board, and interface directly with regulators at a strategic level. It's about vision and enterprise-wide impact.

    • Developing and owning the multi-year privacy roadmap for the entire organisation.
    • Leading responses to major regulatory enforcement actions.
    • Overseeing privacy aspects of M&A activities.
    • Driving the integration of privacy into broader enterprise risk management frameworks.
    • Representing the organisation in industry forums and shaping policy discussions.
Working with AI on the job

Working with AI

Where AI is starting to help

Let's be real, the DPO Manager role is demanding. You're juggling team leadership, strategic oversight, and a mountain of regulatory detail. The good news? AI isn't here to replace you; it's here to give you and your team superpowers, freeing you up for the truly strategic stuff.

We're embedding AI tools across our compliance function to automate the mundane, accelerate analysis, and provide smarter insights. As DPO Manager, you'll not only use these tools yourself but also champion their adoption within your team, driving efficiency and accuracy across our entire privacy programme.

DSAR Automation Co-pilot (Team Edition)

Imagine your team’s DSAR workload cut dramatically. AI tools automatically ingest data subject requests, identify relevant keywords, and scan structured and unstructured data sources (emails, documents, databases) to find and collate the subject's data for initial review. This means your DPOs spend less time on tedious data discovery and more time on verification and communication. You'll oversee the process, ensuring accuracy and compliance.

Advanced Contract Analysis Accelerator

Reviewing third-party Data Processing Agreements (DPAs) is crucial but time-consuming. Our AI-powered tools scan these contracts, flagging non-standard clauses, identifying missing Standard Contractual Clauses (SCCs), or highlighting terms that conflict with our internal policies. This drastically reduces the manual legal review time for your team, allowing you to focus on strategic vendor risk management and negotiation, rather than clause-by-clause checking.

Regulatory Horizon Scanning & Research Assistant

Staying on top of global privacy regulations is a full-time job in itself. You'll use LLMs trained on legal and regulatory databases to summarise new guidance from Supervisory Authorities (like the ICO), analyse recent enforcement actions, and even provide initial drafts of responses to complex regulatory inquiries. This gives you and your team a significant head start, ensuring you're always ahead of the curve.

Policy & Notice Drafter & Reviewer

Need a new privacy notice for a product launch or an update to an internal data retention policy? Generative AI can create first drafts based on a set of core principles and requirements. As DPO Manager, you'll then refine, review, and approve these, ensuring consistency and accuracy across all our privacy documentation. This saves significant drafting time for your team, allowing them to focus on implementation and stakeholder engagement.

Common questions

Common questions

How do you become a Data Protection Officer (DPO) Manager?

Common routes in include Senior Data Protection Officer (3-5 years as a Senior DPO.), Privacy Consultant (External) (5-8 years in a senior privacy consulting role.) and Legal Counsel (Privacy Specialism) (5-7 years as a dedicated privacy lawyer in-house or at a law firm.). Times vary with prior experience.

Where can a Data Protection Officer (DPO) Manager progress to?

This role can lead on to Director of Data Protection & Privacy (3-5 years as a DPO Manager.), depending on the skills you build.

What new skills matter most for a Data Protection Officer (DPO) Manager?

Increasingly, Data Ethics & Responsible AI Governance and Advanced Privacy Engineering & PETs (Privacy Enhancing Technologies). These are the skills our record of this role lists as growing.

Free tools

Want a read on where you stand?

Three free tools, no account needed. Each one ends with a role, a level and a way in.

Read the Zavmo manifesto to understand how you will be taught Meet your tutors

Or try another one

17Where to go from here

Other roles at Level 6

Same depth of qualification, different job. Useful if the work appeals but this particular role does not.

 More jobs in compliance, quality and safety

Stay in the field you know and move sideways rather than up.
If you leave this industry

The skills built as a DPO Manager carry across industries that handle large amounts of data, including FinTech, HealthTech, e-commerce and SaaS. Expertise in regulatory compliance, risk management and ethical data use applies in any sector that processes personal data.

This role profile is © 2026 Growth Engineering Technologies Ltd. Built from UK occupational standards and regulated qualification data, and written for Zavmo.

You're not behind. You're right on time. The shift is only just beginning. Your role won't look the same in two years. Be the one who leads the change, not the one it happens to. Start my free Data Fluency module What happens next: a free account, then we build your plan as you set up. No card. Build your plan, see your roadmap and meet the twelve tutors matched to you. All free. When you're ready to start learning, it's £70 a month, billed monthly. Cancel any time and billing stops.