ICoBCAcademy

Data Protection Basics for Credential Issuers

The personal data inside a credential and the duties that come with it.

  • Knowledge
  • L1 Contribute
  • Foundation
  • Security, privacy and data protection
  • ICB-F10
Start the courseSource on GitHub

Why this course

Every issuer processes personal data, and credentials are designed to travel, which multiplies exposure. A basic GDPR module prevents frequent mistakes such as too much data in public badges or evidence links that never expire, and prepares for P12.

What you will be able to do

  1. Identify personal data in credentials, evidence and platform logs.
  2. Explain legal bases, data minimisation and retention for issuing and verification.
  3. Describe earner rights and how to handle requests, including deletion and revocation.
  4. Recognise when a data protection impact assessment is needed.

Modules

  1. Personal data in credentials
  2. Legal basis and purpose
  3. Minimise what you publish
  4. Earner rights
  5. Third parties, platforms and transfers

Assessment

Knowledge check (12 questions), scenario-based.

Badge evidence: Passed knowledge check.

Prerequisites: None

Who it is for

  • Companies and employers
  • Education and providers
  • Associations and policy

Framework alignment

ICSFframeworkSECPskillL1levelKstage

Security, privacy and data protection (SECP, VRITE pillar Trustworthiness)

Related skills: Policy and regulatory navigation, Earner experience and agency. About the framework

Use in your organisation

In corporate training

Self-paced module for L&D and corporate academy leads; HR and learning technology owners. Badge aligns to ICSF SECP L1 (SFIA 1 to 2) and can be referenced in role profiles. Counts as awareness evidence; it does not show performance.

In education

Micro-credential of 2 h notional workload (about 0.1 ECTS), indicative EQF 3 to 4, assessed by knowledge check with feedback. Stacks into pathway PW04.

EU micro-credential elements

Awarding body ICoBC e.V. or licensed issuer. Learning outcomes: see column. Notional workload: 2 h (about 0.1 ECTS). Level: ICSF L1, EQF 3 to 4 (indicative). Type of assessment: knowledge check with feedback. Form of participation: Online, asynchronous. Type of quality assurance: ICoBC internal QA against VRITE. Prerequisites: none.

Elements following the Council Recommendation of 16 June 2022 on a European approach to micro-credentials.

Part of these pathways

Quality and AI

Quality focus: VRITE Trustworthiness.

AI dimension: Covers sending evidence or earner data to AI services.

Improve this course

The course is open on GitHub in LiaScript format under CC BY 4.0. View the source or read how to suggest a change.