General Data Protection Regulation (GDPR)
Data protection relates to how all organisations collect, use, and store personal and sensitive data. That includes the government, companies, service providers and anyone who manages data.Data protection legislation, which includes the General Data Protection Regulation (GDPR), aims to help prevent data misuse and inflicts penalties on those in breach of the law.
Our Data Protection Online Training Course will help your employees understand what personal and sensitive data are, why they need protection, and how to comply with the GDPR.
- 30 Minutes
- All staff

Learning objectives
- Distinguish between non-personal, personal and special category ('sensitive') data
- Recognise how our Company complies with the General Data Protection Regulation (GDPR) and other data protection legislation
- Take appropriate action to safeguard personal and special category data
- Identify how and when to report breaches
What can you expect your employees to learn?
Introduction
What is Data Protection?
- You decide: The importance of data protection
- You decide: Breaches of data protection law
- Crossing the line: Breaches of data protection law
- Who is involved in data protection?
- Personal data
- Special category ('sensitive') data
- You decide: Types of data
Data protection legislation
- The GDPR
- Rights of the data subject
- Scenarios: Rights of the data subject
The data protection principles
Principle: Lawfulness, fairness & transparency
- Lawful bases
- Lawful basis: Consent
- Scenario: Getting consent
- Scenario: A customer withdraws consent
- Scenario: Passing on contact details
- Lawful basis: Legitimate interests
- Legitimate interest assessments
- You decide: LIAs
- Documenting & reviewing LIAs
- Data protection impact assessments
Principle: Data limitation
- Scenario: An offer for a new service
- Scenario: Contacting customers' connections
Principle: Data minimisation
- Scenario: Information from job applicants
- Scenario: Information from customers
Principle: Accuracy
- You decide: Keeping data accurate & updated
Principle: Storage limitation
- Scenario: Retaining job applicants' details
- Scenario: Keeping details of former customers
Principle: Security, integrity & confidentiality
- International transfers of personal data
- Scenario: Gina's data transfer
- You decide: Are additional safeguards required?
Data subject access requests
- Dealing with DSARs
- You decide: Is it a valid DSAR?
Personal data breaches
- Scenarios: Personal data breaches
- Notification of breaches
- Scenario: Stolen data
Accountability & governance
- Records of processing activities
Penalties
- Crossing the line: Further breaches of data protection law
Your responsibilities
Summary
Affirmation
Assessment
Start your compliance e-learning journey with a free trial
Our no-obligation free trial gives you access to our libraries and compliance platform.
Ready to start your free trial? Complete the form, and a member of the Skillcast team will be in touch with further details.
Your questions, answered
Data Protection (GDPR)
Common FAQs
Where can I track incidents involving personal data?
How can I ensure that employees formally attest to our internal Data Protection Policy?
Are Skillcast courses SCORM-compliant?
What other tools are needed beyond training?
Is our training content still compliant with the latest legislation?
- You can check the latest course content updates in our library updates page: https://www.skillcast.com/compliance-course-library-updates
- For major legislative changes, we:
- Will send you email alerts to ensure you are notified
- Offer you a free trial of newly created or updated content
- Host webinars with compliance experts to explain the changes and how our training supports your ongoing compliance
Can you translate our content into other languages?
How can I give employees a secure way to record suspicious activity so we can act quickly?
Our Suspicious Activity Register allows staff to log concerns or irregularities they observe, helping you detect potential issues early. The secure register can be reviewed by compliance teams, enabling prompt investigation and action.
What file types are supported by the Skillcast system?
Features |
Supported file types and details |
File Exchange |
File types: PDF, Excel spreadsheets, Word documents, SCORM and xAPI files, and compressed zip files. Max file size: Default is 1GB, can be increased to a max of 2GB |
SCORM files |
Versions: SCORM 1.2, SCORM 1.2 for Moodle, SCORM 2004 2nd, 3rd and 4th Edition. Max file size: 1024MB |
xAPI file |
Max file size: 2GB |
Videos |
File types: MP4 or MOV. Videos must be optimised, with a max file size of 100MB. If the file is bigger, our Design Team can help |
Images |
File types: jpg, png and gif. The file size should ideally be 100KB, but it can be up to 250KB |
CPD evidence |
File types: Word, PDF, Excel and CSV. File size: the limit should be whatever the portal config option is set to. Servers are set to max 2GB |
Policy documents |
PDF or Word File size: the limit should be whatever the portal config option is set to. Servers are set to max 2GB |
Offline activities evidence |
File types: PDF, DOC, DOCX, XLS, XLSX, CSV, PNG, GIF, JPEG, JPG, PPTX and MSG. File size: the limit should be whatever the portal config option is set to. Servers are set to max 2GB |
Client logo files |
File types provided by client: EPS, PDF, AI and SVG |
Registers |
PDF, DOC, DOCX, XLS, XLSX, CSV, PPT, PPTX, POT, PPA, PPS, JPG, JPEG, PJEPG, PNG, BMP, GIF, MP4, MOV, WMV, CPTX, CP, TXT, ZIP and MSG files |
Declarations |
JPG, JPEG, PNG, GIF, XLS and XLSX files |