Registering with the ICO is the paperwork step. Understanding what data protection actually requires of you day to day is the part that keeps you compliant once that registration is done, and it's where most sourcing agents have genuine gaps.
What sourcing agents get wrong about data protection
Sourcing involves handling a wide spread of personal data, investor details, seller contact information, financial documents shared during due diligence, and client ID for AML checks, often across email, WhatsApp, and spreadsheets that were never really designed to hold sensitive information securely.
Generic GDPR training tends to focus on the legal principles without addressing what that means practically when you're managing investor lists, sharing seller information with prospective buyers, or storing ID documents for AML purposes. That's the gap sourcing-specific training needs to close.
What NAPSA's Data Protection course covers
The course is CPD certified, carrying 2.75 CPD hours, with a 70% pass mark. It's built around the specific data handling that comes up in sourcing work: what lawful basis applies to different types of contact, how long you should be holding onto ID documents and financial data, and practical steps for handling investor and seller information securely.
See the Data Protection course →
NAPSA Members get a 25% discount on training. Please login to your Project Board to access your unique link.
Registered with the ICO already?
Training and registration cover different things. If you haven't confirmed your ICO registration status yet, that's worth checking first.
Read: ICO registration for property sourcers →
Data protection and AML training are often taken together, since both deal with how you handle sensitive information responsibly. See the combined course →
