Privacy and the GDPR – Online training in 16 languages
Privacy and the GDPR
Included in the flat-rate subscription
Privacy and the GDPR at a glance
- Legal basis
- DSGVO (Art. 5, 32, 39), BDSG (German Federal Data Protection Act)
- Who must participate
- All employees working with personal data
- How often
- The DSGVO does not stipulate a fixed interval; however, controllers must ensure that employees only process data on instructions (Art. 29, 32 Abs. 4 DSGVO). Training upon hiring and annually thereafter is customary and recommended.
- Proof
- Written or electronic documentation with date, content, and participants; Armstrong automatically generates a certificate for this purpose.
Facts about the training
| Legal basis | DSGVO (Art. 5, 32, 39), BDSG |
|---|---|
| Target group | All employees working with personal data |
| Refresher | every 12 months |
| Duration | 20 minutes |
| Languages | 16 |
| Proof | Certificate with knowledge test |
What participants learn
- Personal and special category data
- Principles of data processing
- Rights of data subjects
- Identifying and reporting data breaches
- Handling data securely in everyday work
Frequently asked questions
Is data protection training mandatory for employees?
The DSGVO does not mention an explicit training obligation for all employees. However, controllers must be able to demonstrate that they take appropriate organizational measures (Art. 5 Abs. 2, Art. 32 DSGVO) – documented training is the customary proof for this. Raising employee awareness is one of the tasks of the data protection officer (Art. 39 DSGVO).
How often should data protection training be repeated?
There is no fixed interval. Training upon hiring and annually thereafter, as well as upon introduction of new systems or after data breaches, is recommended.
Is online safety training legally permissible?
Yes. Safety training may be conducted electronically if the content is workplace-related, comprehension is tested, and employees can ask questions of a competent person at any time (DGUV Regel 100-001 (rules of German statutory accident insurance), Abschnitt 2.3). Armstrong tests comprehension with knowledge questions and provides a question function.
How is the safety training documented?
Upon completion, each person receives a certificate with their name, date, topic, and the result of the knowledge test. Participation can be retrieved by the employer at any time in the participation matrix – this provides proof of documentation in accordance with § 4 Abs. 1 DGUV Vorschrift 1. (German statutory accident prevention regulation)
About this course
The secure handling of personal data is essential in everyday work and is governed by the General Data Protection Regulation (GDPR). This training course provides a basic understanding of what data is considered personal or particularly sensitive, and the principles according to which it may be processed. You will learn about the rights of data subjects and how to act in compliance with data protection regulations in various work environments—whether in the office, while working from home, or when using AI tools. A key focus is on practical data security measures, the detection of data breaches, and the correct procedures to follow in the event of an incident to avoid potential legal consequences and ensure the protection of sensitive information.
Train in your team's language
Test the templates for 14 days in all available languages.