Data protection training for staff
Training works when it covers the processing operations of your own organisation rather than the GDPR in general. Both sides have to be evidenced, that it happened and who attended.
Most incidents begin at a desk and not in the technology. Training therefore starts where the mistakes happen, and its effect depends on the preparation.
Two occasions
Building knowledge
- Basics for new members of staff
- Deeper sessions for departments with processing operations of their own
- Building internal points of contact alongside the data protection officer
Mandatory training
- The awareness raising and training that Article 39(1)(b) GDPR assigns to the data protection officer
- Refreshers at a fixed interval, so that the record does not age
- Attendance documented, because that too is part of the accountability record
Three formats
- In houseOn site or online, with your systems and your examples. Questions from the room can be settled on the spot.
- WebinarOne appointment without travel, suited to basics and to short refreshers.
- E-learningThrough the lexICT Academy, taken whenever it suits. The system records the completion of each unit.
Content tailored on request
The standard course covers what applies to every organisation. On request we tailor it to your processing operations, meaning the systems your staff work with every day and the situations that actually arise in your organisation. A session in which your own software appears is the one people remember.
When did you last run a session?
We tell you what your organisation needs, and in which format it costs the least time.
Ask about trainingFrequently asked questions
How often do we have to train?
The GDPR sets no fixed interval. An annual refresher is common and easy to defend before a supervisory authority, together with an induction when someone joins and whenever processing operations change materially. Producing a first training record after three years is hard to explain.
How long does a session take?
A basic session usually fills ninety minutes, a refresher half of that. Deeper sessions for data protection coordinators or for individual departments run longer, because they work through actual procedures. We agree the scope beforehand.
How is attendance evidenced?
Through an attendance list and, where you want one, a certificate per person. In e-learning the system records the completion of each unit itself. The record is part of the accountability obligation under Article 5(2) GDPR and is usually the first thing a supervisory authority asks for.
Do you also train in English?
Yes. Basic and mandatory sessions are held in both languages, as are the materials. With a mixed workforce, a separate English run alongside the German one is usually calmer than one bilingual session.