Data Protection Law for Archives, Museums and Library Collections
Trainer: Naomi Korn Associates
Training: Online - Monday 9th November 2026 - 12.30 to 4pm
Are you confident in managing personal data within your archive, museum, or library collection?
This half-day course provides a practical introduction to data protection law as it applies to the unique challenges of archives and museums. You’ll explore the UK GDPR, the Data Protection Act 2018, and learn how to manage personal data responsibly in a cultural heritage context.
Through real-world examples and practical guidance, you’ll gain the skills to handle personal and sensitive data compliantly, balancing legal obligations with the needs of preservation and access.
You’ll leave this course with a clear understanding of how data protection law applies to archives, museums, and library collections. You’ll be equipped to manage personal data confidently, ensuring compliance while maintaining access to historical records
This course is ideal for
Archivists, museum, and library professionals
Records managers and information governance staff
Data protection officers in cultural heritage organisations
Anyone handling personal data within collections
Course learning outcomes
Recognise the background of applicable laws (UK GDPR, Data Protection Act 2018).
Define personal data within archived and collection contexts.
Understand the concept of compatible processing.
Identify the lawful basis for processing archival records.
Understand required safeguards for processing special category data.
Apply the storage limitation principle in an archival setting.
Recognise applicable exemptions and what they mean in practice
Understand data subject rights in relation to archives, including access and erasure.
Consider security issues specific to archives and museum environments.
This course offers expert-led, interactive sessions, course materials, slides, and resources and opportunities for Q&A throughout.
The learning outcomes map to the following areas of ARA’s competency frameworks.
Access to records
Managing operational risk
Legislation and regulation
Appraisal, retention, selection and disposal
Developing self and others
Booking and delegate fee: £90 for ARA members, £140 corporate members, £234 non-members
Please note we do not charge VAT.
Eventbrite bookings close 12pm on Thursday 5th November 2026. Joining instructions will be emailed 24 hours before the event. Please check you have received these in advance of the start time so you’re ready to join on the day.
Please book your place here before 12pm on Thursday 5th November 2026