General Data Protection Regulation (GDPR)

est. 30 mins

💡 After this training:

The learner is able to identify their rights and responsibilities in disclosing their own data to online services.

Check which agency or authority is responsible for data protection in your country and read about what kind of rights citizens have.
Choose one website that is commonly used and check the privacy policy, and discuss how your data is processed and protected.

Together, go through what the GDPR regulation is and what rights it gives to citizens.

Have you ever read the full privacy policy before clicking “I Agree”? Why or why not?
When using apps (e.g., social media, fitness tracking, banking), what kinds of data do they collect about you, and how do you feel about it?
Have you ever refused to give consent? What happened?
Can you think of a time when you regretted giving your personal data?
In what kind of situations do you give consent to the use of your personal data? Think about your personal and work life situations.
e.g. online shopping, newsletter subscription.

Computer 💻

Ideas on how to create better training?

Would you like to share how your training went?

Join our community of digital skills trainers from the button below.

video language 🇬🇧

What it is: A law that protects personal data and privacy in the European Union.
Why it matters: It gives people the right to control how their data is used by businesses, governments, and organizations.
Trainer tip: Use analogies like "Your personal information is like your house. GDPR gives you locks on your doors and says who can enter."

What it is: Any information that can be used to identify you—name, email, photo, phone number, ID number, location, etc.
Examples: Your email on a newsletter list, your address when ordering online.

What it means: You must give clear permission for your personal data to be collected or used.
Trainer tip: Ask: “Have you ever clicked ‘I agree’ online without reading?” This is often how consent is given online.

What it means: Any action done to your data—collecting, storing, using, sharing.
Example: A website saves your email to send you a receipt or future offers.

What it is: A document on most websites that explains how they collect, use, and protect your data.
Where to find it: Usually at the bottom of the homepage under "Privacy Policy."
Trainer tip: Show a live website and scroll to the footer to find the link.

What it is: A national office that makes sure organizations follow data protection laws.
Examples:
- Finland: Tietosuojavaltuutetun toimisto
- Estonia: Protection of personal data and privacy, Avaleht | Andmekaitse Inspektsioon
Trainer task: Help learners find their country's authority and what it says about citizens’ rights.

Right to access: You can ask what data an organization has about you.
Right to correction: You can fix incorrect data.
Right to deletion ("right to be forgotten"): You can ask for your data to be erased.
Right to data portability: You can get a copy of your data.
Right to object: You can say no to data being used for marketing or profiling.

Discover how to use this training material together with other themes to help learners earn the Open Badge.

Badges allow learners to demonstrate the skills they have gained and showcase their achievements. Learn more by clicking the button below.