Course 1 of 6 · Representative excerpt
Introducing GDPR
Understand core data-protection principles and practical responsibilities when handling personal information.
A practical check before collecting personal data
Data protection begins before information is collected. A learner is encouraged to identify the purpose, collect only what is necessary, use an approved system, keep information accurate and know when it should be deleted.
Workplace scenario
A team wants a shared spreadsheet containing dates of birth, home contact details and health information for a staff event, but nobody has confirmed why every field is needed.
Safer response
Pause the collection, clarify the purpose and remove unnecessary fields. Special-category information needs additional safeguards and an appropriate basis, so the learner should use approved channels and escalate uncertainty to the organisation’s data-protection lead.
Learning outcomes
Recognise personal and special-category data
Apply data-minimisation and security principles
Report requests and incidents promptly
Suitability: General awareness only; it is not legal advice or a complete data-protection compliance programme.