Data Protection E-Learning

Scope, purpose and protective philosophy of the EU General Data Protection Regulation, with concrete examples of when it applies and which data it protects.

The six lawful bases under Art. 6 GDPR (consent, contract, legal obligation, vital interests, public interest, legitimate interests) explained with day-to-day examples.

The eight rights under Art. 15-22 GDPR (access, rectification, erasure, restriction, portability, objection, no profiling, complaint) — deadlines and escalation paths.

Technical and organisational measures under Art. 32 GDPR: encryption, pseudonymisation, access control, backup strategy — with minimum SME baselines.

Processor relationships under Art. 28 GDPR and third-country transfers: minimum DPA contents, SCCs, the 2024 DPF update, and the consequences of Schrems II for cloud services.

The 72-hour breach notification under Art. 33 GDPR: when to report, what the report contains, and when a data protection impact assessment under Art. 35 becomes mandatory.

Email, cloud tools, working from home, BYOD, clean-desk hygiene: the most common GDPR pitfalls in daily work and how to avoid them.

The most important obligations on a single page: records of processing, check the lawful basis, inform data subjects, document TOMs, report breaches — your personal GDPR checklist.