UK GDPR at Work: Handle It Like It’s Yours
Included with TrainMeUK — no separate course purchase required.
A caller wants his wife’s appointment details. Staff learn what counts as personal data, apply the seven principles, and pass a rights request on fast.
- Assign to
- All staff
- Duration
- 30 minutes
- Evidence
- 12-question quiz
- Your version
- Editable
What they will be able to do
- Recognise personal and special category data.
- Apply the seven principles to everyday decisions.
- Recognise a rights request, however it’s worded, and pass it on fast.
- Spot a breach and report it straight away.
The course
- 01What counts
- 02The principles
- 03People’s rights
- 04When it goes wrong
The decision they practise
In “A message to reception”, a face-to-face conversation, learners practise what to say and do when the other person pushes back. The wrong options are things a well-meaning person might genuinely say, and the feedback explains why each one is tempting. Short animations show “The life of a piece of personal data” and “Can you share it?”.
How you know they finished
The 12-question quiz mixes multiple choice, matching, sequencing and spot-the-hazard questions and returns to the opening story.
Roll it out with
Relevant legislation and guidance
The course draws on these. Which ones apply depends on the organisation and the role. Finishing the course is a training record.
- UK GDPR and the Data Protection Act 2018
- Data (Use and Access) Act 2025
How this course is built
Interactive activity
Learners practise the decision in the course, including what to say when someone pushes back.
Edit it in the builder
On Growth and above, adapt the scenarios and wording to your own workplace, policies and reporting procedures.
A record they finished
The 12-question quiz closes the course, so you can show who completed it.
Related courses
TrainMeUK course library
Ready to make GDPR training easier?
Give your team access to practical, interactive training, with automated assignments, reminders and completion records managed in one place.
Related reading
- Is GDPR training a legal requirement in the UK?Who must be trained under UK GDPR and the Data Protection Act 2018, and what the ICO expects.
- How often should GDPR training be done?When to train new starters, how often to refresh, and what counts as enough.
- How do you prove GDPR training to an auditor?The completion records UK organisations are asked for, and where the evidence usually falls short.