Skip to content
Step 1 / –
hubThe essentials

You have worked through the four rules

Nice work. Before we head to the final exam, let us refresh the essentials: what the GDPR is really about, and what the four core rules are.

groupPersonal data
  1. checkData minimisation
  2. checkTransparency
  3. checkSecurity
  4. checkRights of data subjects
flagIntroduction

Recap of the essentials

A short refresher of what you have learned. Take it calmly, and then you are ready for the exam.

targetIn this module
  • check_circleThe four rules in a row again
  • check_circleHow personal data and the rules fit together
  • check_circleReady for the final exam
menu_bookRecap · 1 of 2

What it is all about: personal data

It all starts with personal data: every piece of information linked to an identifiable individual, whether that is a customer, employee, supplier, or third party.

categoryThree kinds

About people (name, address, age), related to people (purchase history, email, IP address), and special category data (health, biometric, criminal-conviction), which is extra protected.

menu_bookRecap · 2 of 2

The four rules in one sentence

1Data minimisationarrow_forwardUse only data that is strictly necessary, tied to a business purpose and a valid lawful basis.2Transparencyarrow_forwardCommunicate proactively and in plain language which data you use, how, why, and for how long.3Securityarrow_forwardProtect data with technical and organisational measures against unauthorised access, loss, or damage.4Rights of data subjectsarrow_forwardFacilitate the rights (access, rectification, objection, erasure ...) and respond within 30 days.
quizPractice · question 1 of 3
infoNot for points, choose the correct answer to continue
"What does every processing of personal data need?"
Correct: data minimisation requires every use to have a documented business purpose and a valid lawful basis.
quizPractice · question 2 of 3
"You want to secure your systems well. Which approach fits?"
Correct: they reinforce each other. Strong passwords and 2FA, no shared accounts, and least privilege all belong together. Security is only as strong as the weakest link.
quizPractice · question 3 of 3
"A data subject submits a request for access. What applies?"
Correct: facilitate the rights of data subjects and respond to requests in principle within one month.
summarizeSummary

The essentials in four points

  • boltPersonal data is all information linked to an identifiable individual; special category data is extra protected.
  • boltData minimisation: only what is strictly necessary, with a purpose and a lawful basis.
  • boltTransparency: communicate proactively and clearly; Security: technical and organisational.
  • boltRights of data subjects: facilitate them and respond within one month.
workspace_premiumReady for the exam

Ready for the final exam 🎓

You know the essentials. In the practice quiz you test your knowledge across the whole course, with instant feedback on every question. The official exam with a certificate of attendance is in the GDPRWise app’s paid plans.

lock_open 7 of 8 modules

One step left: the practice quiz

Try the free “GDPR essentials for SMEs” practice quiz. The official exam with a certificate of attendance is in the GDPRWise app’s paid plans.

check_circle Modules 1-7 completeradio_button_unchecked Final exam ≥ 70%
workspace_premium