Three layers working together: principles, lawful bases and rights. This e-learning explains the GDPR in a way that works even for those who did not grow up with it.
A new colleague asks on her first day: "What do I really need to remember about the GDPR?" A fair question. The regulation is large, even lawyers do not master every nuance, and yet every employee is expected to know what to do with personal data. This is the course that helps make that distinction manageable.
The General Data Protection Regulation course brings the law back to three layers that interlock. The principles tell you how to handle data: lawfully, transparently, with a purpose, no more than necessary, accurate and secure. The lawful bases answer why you may process data. The rights of data subjects determine what the people behind the data may expect from you.
Employees learn that these three layers are not separate topics but apply to every action at the same time. Good GDPR practice starts with a clear purpose, then chooses an appropriate lawful basis and remains true to the principles. When a data subject exercises a right — for instance, access or erasure — you must recognise it and follow through.
The course covers everyday situations: an access request, a correction in a file, sharing data with a vendor, retaining data after a customer leaves. The same structure returns each time: purpose, lawful basis, principles, rights. With that order you go further than with isolated rules memorised in advance.
Finally, it is emphasised that the GDPR is not only for specialists. The regulation only works when every employee takes a brief reflective step at moments of doubt and knows whom to ask for help inside the organisation.
The core message is clear: master the three layers and you understand 80 percent of what the GDPR asks of you.
What does the participant learn concretely?
After completing this course:
- the participant knows the six principles of the GDPR
- they know which six lawful bases can justify processing
- the participant recognises the rights of data subjects in practice
Who is this course for?
This course is suitable for:
- new employees during onboarding
- every employee who processes personal data
- organisations that want to strengthen GDPR basics across the company
Why this course is relevant now
The GDPR is not a one-off topic. Every new employee steps into the middle of it and needs handles that do not discourage. A shared base prevents mistakes, accelerates moments of doubt and makes privacy part of professional working.