EU GDPR Essentials

This course explains the EU General Data Protection Regulation, Regulation (EU) 2016/679, for organisations that operate in the EU or EEA, or that offer goods or services to, or monitor, people there. You will learn when the Regulation applies, its principles, lawful bases and rights, how supervisory authorities and the European Data Protection Board work, and what to do about breaches. It also explains how the EU GDPR and the UK GDPR relate after Brexit.
Modules
5
Duration
About 50 minutes
Pass mark
80%
Assessment
10 questions from a bank of 16

Learning outcomes

  • ✓Explain when the EU GDPR applies, including its territorial scope under Article 3.
  • ✓Describe the principles of processing, the six lawful bases and the rights of individuals.
  • ✓Outline the roles of supervisory authorities, the lead authority under the one-stop-shop and the European Data Protection Board.
  • ✓Identify when a non-EU controller or processor needs an EU representative under Article 27.
  • ✓Recognise a personal data breach and the 72-hour notification rule, and summarise the maximum fines.
  • ✓Compare the EU GDPR and the UK GDPR and explain why they are separate regimes.

Course contents

  1. Module 1: What the EU GDPR is and when it applies

    Video (5 scenes) · 2 lessons · 2 practice questions

  2. Module 2: Principles and lawful bases

    Video (5 scenes) · 2 lessons · 3 practice questions

  3. Module 3: The rights of individuals

    Video (5 scenes) · 2 lessons · 2 practice questions

  4. Module 4: Regulators, the one-stop-shop and EU representatives

    Video (4 scenes) · 2 lessons · 2 practice questions

  5. Module 5: Breaches, fines and the UK after Brexit

    Video (5 scenes) · 2 lessons · 2 practice questions

  6. Final assessment & certificate