Global

Handling personal data day to day: Consent, minimisation, retention and sharing

A ready-made course you customise for your organisation, with a live session deck and two surveys. You only add the 9 details that are specific to your organisation.

See the live deckSee the full outline
Try the coursePreview the survey
Length
40 min
Lessons
6 lessons
Frequency
At onboarding, annually
Last reviewed
21 Oct 2026
Keep it only as long as needed
What would you do?

You find a three-year-old customer export on a shared drive

Try it: this is one of 21 interactive activities in the course.

What's included

Three pieces that work together

Copy once, get everything. Learners prepare on their own, you answer questions live, and the surveys tell you what stuck.

Self-paced course

Short lessons with real workplace scenarios, not walls of text.

  • 6 lessons, about 40 minutes
  • Process, scenario, accordion, sorting activity and quizzes

Live session deck

An AhaSlides presentation to run after the course, in person or online.

  • 10 slides
  • Quiz, poll, word cloud, scale slides
  • A closing slide for your contacts

Two surveys

Find out what landed, and whether people use it on the job.

  • Post-course feedback, about 2 minutes
  • 30-day check-in
  • Anonymous by default
  • Results feed your next refresher

Learning objectives

At the end of this course, learners can

Each objective and the lesson that covers it.

IDObjectiveSourceWhere it's covered
TO 197.0Achieve ≥ 80% on the final assessment-Whole course
SO 197.1Recognise personal data and sensitive categories in everyday workData protection law of the market (see verification list); best practiceWhole course
SO 197.2Collect only what you need and tell people what you do with it + your infoData protection principles (see verification list)Whole course
SO 197.3Keep personal data only as long as the retention schedule allows + your infoOrganisation's retention scheduleWhole course
SO 197.4Share personal data only through approved routes and with a reason + your infoOrganisation's data classification policyWhole course
SO 197.5Spot and report a data problem straight away + your infoOrganisation's incident route; data protection law of the marketWhole course

Your part: what a template can't do for you

  • Your workplace details: fill in the 9 highlighted fields so the course describes your own policies, contacts and locations.
  • Records: record completion in your own LMS or record system.

Course outline

6 lessons, about 40 minutes

Minutes per lesson are an estimate, shared out by page count.

ContentInteractiveVideoYou customise
1

What counts as personal data

3 pages

7 min
Before you beginNoteList
The helpful spreadsheetTextImage
What is wrong?ChecklistKey factQuiz
2

Collect only what you need

3 pages

7 min
Purpose and minimumProcess
Sensitive dataAccordionNoteYour info
CheckSorting activityMatching quiz
3

Keep it only as long as needed

3 pages

7 min
RetentionTabs
CopiesAccordionText
Try itScenarioQuiz
4

Share it safely

3 pages

7 min
Before you shareProcess
Approved routesNoteYour infoYour infoAccordion
CheckSorting activityMulti-select quiz
5

Grey areas: requests, mistakes and favours

3 pages

7 min
RequestsProcessYour info
What would you do?ScenarioYour info
CheckSorting activityQuiz
6

Your checklist and the final assessment

2 pages

5 min
Next stepsProcessYour info
PracticeQuizKey factNoteButtonYour info

Live deck and surveys

10 slides to run live, two surveys to close the loop

Pink slides are interactive. Both surveys are anonymous; pink questions are written for this course.

ContentTitle, agenda, "personal data in everyday work
PollWhich personal data do you handle most?
Word cloudWhere do copies of personal data hide in your work?
ContentCollect, keep, share in one picture
QuizWhich is usually sensitive personal data? Health information ✔ · A job title · A company name · A work email signature
QuizYou send a file to the wrong person. First step? (Report it at once ✔)
ScaleHow sure are you where to send a data request?
Content · customiseApproved routes
Open-ended / Q&AOne data habit you will change
Content · customiseClosing {{PRIVACY_CONTACT}}, {{SURVEY_1_URL}}, {{SURVEY_2_URL}}, {{COURSE_URL}}
Post-course feedback: 11 questions, about 2 min
  1. Overall rating 5 stars
  2. Relevant, realistic, right length, helpful activities agree/disagree grid
  3. What was most useful? multi-select
  4. Confidence before this course, and now 1-5 scale
  5. Which habit will you change first? multiple choice
  6. How confident are you reporting a data mistake straight away? 1-5 scale
  7. Which course should come next? ranking
  8. I feel safe reporting a data mistake. 1-5 scale
  9. One thing we should change or add open text
  10. Would you recommend this course? NPS
30-day check-in
  1. Have you used what you learned since the course? multiple choice
  2. How confident are you today? Compare with day 1 1-5 scale
  3. Do you know where to find the privacy contact and the retention schedule? yes / no / not sure
  4. A moment where the training helped, or where you weren't sure open text
  5. Which topics should the next refresher focus on? ranking

Results show whether people use the training on the job, not just whether they finished it.

Make it yours

9 fields to fill in, and you're ready

Everything else is done. These are the details only your organisation knows; each one is highlighted inside the course.

  • The route for reporting a security incident or suspected breach, and the time limit that applies{{INCIDENT_REPORT_ROUTE}}
  • Your data protection officer or privacy lead{{PRIVACY_CONTACT}}
  • Link to your data classification policy{{DATA_CLASSIFICATION_POLICY_LINK}}
  • Link to the list of approved tools and services{{APPROVED_TOOLS_LIST}}
  • Link to the next course in your security awareness path{{NEXT_COURSE_LINK}}
  • Where course completions are recorded{{LMS_OR_RECORD_SYSTEM}}
Show all 9 fields
  • Link to the self-paced course{{COURSE_URL}}
  • Link to the baseline survey{{SURVEY_1_URL}}
  • Link to the post-course and 30-day survey{{SURVEY_2_URL}}

FAQ

Common questions

Can I run handling personal data day to day: Consent, minimisation, retention and sharing training online?

The course itself is self-paced and online, and the live deck lets you add a live session. Whether online delivery meets your local rules depends on the law that applies to you, so check the rules that apply to you or ask your own counsel.

How often is this training needed?

At onboarding, annually, and when a new system or process starts handling personal data.

Who needs this training?

All staff who handle customer, employee or patient data, and privacy champions; run by L&D with the privacy or data protection lead.

What records should I keep?

Record completion in your own LMS or record system, so you can show who finished the course and when. Check the retention period that applies to you in the rules that apply to you.

Can I edit the content?

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply. Keep anything your own law requires you to cover.

Related templates

Often taught together

All Security Awareness Training templates →
US federalRequired by law

Security awareness essentials

All employees and contractors · Security Awareness Training

35 min
US federal

Phishing & social engineering

All employees · Security Awareness Training

30 min
GlobalHands-on practical

PCI DSS awareness for card-handling staff

Retail cashiers · Security Awareness Training

25 min
CaliforniaRequired by law

California consumer privacy (CCPA/CPRA)

Customer service · Security Awareness Training

35 min
Last reviewed: 21 October 2026Templates are a starting point, not legal advice.

Ready to run it?

Open the live deck to see how the session runs alongside the course and both surveys.

See the live deck