EU GDPR Awareness
Understand your responsibilities, the relevant authorities and internal support routes.

Who is this course for?
Staff handling personal data within activities subject to EU GDPR, including relevant EEA activities.
What you will learn
- Understand your responsibilities, the relevant authorities and internal support routes.
- Recognise personal data, sensitive records and identifying information in everyday work.
- Use the principles to question and improve an everyday information-handling activity.
- Follow approved lawful purposes and recognise additional conditions and national requirements.
- Collect necessary, accurate information and write records that can be justified.
- Check authority, identity, recipient and method before disclosing personal data.
- Protect personal data through account, device, paper and communication habits.
- Follow the retention schedule and dispose of information without defeating a hold.
- Recognise informal rights requests and complaints and route them promptly.
- Recognise, contain and report a suspected personal data breach immediately.
- Recognise supplier access and transfers that require approval before information is shared.
- Recognise high-risk projects and significant automated decisions needing specialist review.
Explore the syllabus
01Introduction to EU data protection4 min
Understand your responsibilities, the relevant authorities and internal support routes.
02Understanding personal data6 min
Recognise personal data, sensitive records and identifying information in everyday work.
03The GDPR principles6 min
Use the principles to question and improve an everyday information-handling activity.
04Lawful processing and consent7 min
Follow approved lawful purposes and recognise additional conditions and national requirements.
05Transparency and appropriate use5 min
Collect necessary, accurate information and write records that can be justified.
06Sharing and disclosure6 min
Check authority, identity, recipient and method before disclosing personal data.
07Information security5 min
Protect personal data through account, device, paper and communication habits.
08Retention and disposal4 min
Follow the retention schedule and dispose of information without defeating a hold.
09Data subject rights and complaints8 min
Recognise informal rights requests and complaints and route them promptly.
10Personal data breaches6 min
Recognise, contain and report a suspected personal data breach immediately.
11Processors and international transfers5 min
Recognise supplier access and transfers that require approval before information is shared.
12Privacy by design AI and automated decisions7 min
Recognise high-risk projects and significant automated decisions needing specialist review.
Already enrolled?
Use the same work email to resume your training or access your completed-course library.
Open my learning & downloads →