Personal data at the office: requests, mistakes and breaches

Skills you'll practise

• Identify personal data and more sensitive personal data in everyday office documents
• Recognize a request for access to personal data made verbally, in writing or on social media, and route it the same day
• Contain a misdirected email or similar slip and report it internally at once
• Explain who decides whether a breach is reported to the regulator and why speed matters
• Apply clean-desk, printing, screen and email habits that prevent breaches

Course outline

1. 1.Personal data at the office: requests, mistakes and breachesVideo · 2 min
2. 2.Personal data and the requests people makeLesson · 15 min
3. 3.When something goes wrongLesson · 16 min
4. 4.Everyday habits that prevent breachesLesson · 14 min
5. 5.Personal data at the office: requests, mistakes and breaches: knowledge checkKnowledge check · 18 questions
6. 6.The staff list went to a plumberScenario
7. 7.Final exam9 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• UK ICO: A guide to subject access (UK GDPR example: requests can be verbal or written, need no special wording, and must be answered within one month)
• UK ICO: Personal data breaches: a guide (UK GDPR example: report a notifiable breach without undue delay and within 72 hours of becoming aware; record all breaches)
• UK ICO: Principle (c) Data minimisation (UK GDPR example; follow the data-protection law where you work)