About this course
Nearly every role touches personal data in some form, whether it's a customer's contact information, an employee's HR record, or a vendor's payment details. This course builds foundational privacy habits that apply regardless of which specific privacy law governs a given piece of data, giving employees a working understanding of the principles that show up across major frameworks like the EU's GDPR and the California Consumer Privacy Act (CCPA).
The privacy principles taught here center on a few consistent ideas: collect only the personal data actually needed for a defined purpose (data minimization), be transparent about why data is being collected, keep it accurate and up to date, store it only as long as necessary, and protect it with appropriate security measures. These principles hold up across jurisdictions because they reflect a common-sense standard for responsible data handling, not just a legal checkbox.
Privacy has become a genuine business risk, not just a compliance topic. Regulators worldwide have expanded individual rights over personal data, including rights to access, correct, or delete it, and organizations are increasingly expected to be able to demonstrate, not just assert, that they handle personal data responsibly. Employees who mishandle personal data, even unintentionally, can create real exposure for their organization.
This course is designed for all employees, especially those who regularly collect, store, or share customer, employee, or vendor personal data. After completing it, learners will be able to identify what qualifies as personal data, apply data minimization and purpose limitation in daily tasks, recognize when consent or another lawful basis is needed, and know how to respond when someone asks what personal data the organization holds about them.
Topics covered
- What counts as personal data (and what doesn't)
- Data minimization and purpose limitation in practice
- Consent versus other lawful grounds for collecting data
- Secure storage and disposal of personal data
- Recognizing and routing individual privacy rights requests
Want this tailored to your organization's policies? Build your own with AI or book a demo.