EU GDPR Essentials training

Seven microlessons on the EU GDPR: its scope, data roles, lawful bases, technical measures, breaches, DPIAs and data subjects' rights, with situational tests and a certificate of completion.

Start free trial
G24.6Capterra4.7
GDPR Essentials (EU) course preview
7Short, TikTok-style microlessonsIn the browser or the iOS and Android apps

Compliance teams that chose 5Mins

Read their stories
Collingwood nsave ICAB Delamode LOQBOX Kennedys GSK Student Cribs Millennium Hotels Paris Baguette
  • 3Assessments
  • 7Microlessons
  • IncludedCertificate of completion
About this course

What the EU GDPR Essentials course covers

This course covers the essentials of the EU General Data Protection Regulation in seven microlessons. It's built for anyone who handles personal data in the EU, and covers the GDPR's scope, controllers and processors, the lawful bases for processing, technical measures, data breaches and Article 33, privacy and data protection impact assessments, and data subjects' rights.

Learning outcomes

What your people will be able to do

  • Explain the fundamentals of the GDPR and what compliance requires
  • Identify the roles and responsibilities of controllers and processors
  • Recognize the lawful bases for processing personal data
  • Describe the technical measures that support GDPR compliance
  • Handle personal data breaches in line with GDPR Article 33
  • Explain when privacy and data protection impact assessments are needed
Course contents

7 microlessons

Each microlesson is a short, TikTok-style video lesson, with knowledge checks along the way.

1Introduction to GDPR and its Scope
2Who are the Parties Under GDPR
3What is the Legal Basis of GDPR?
4Technical Measures for GDPR
5Understand Data Breaches and GDPR - Article 33
6Mitigating Risk With PIAs and DPIAs
7GDPR Data Subjects

  1. Introduction to GDPR and its Scope: What the GDPR is, and who and what it applies to.
  2. Who are the Parties Under GDPR: Controllers, processors and data subjects, and what each one does.
  3. What is the Legal Basis of GDPR?: The lawful bases for processing personal data.
  4. Technical Measures for GDPR: The technical measures that keep personal data secure.
  5. Understand Data Breaches and GDPR - Article 33: How to respond to a breach, including the 72-hour reporting rule.
  6. Mitigating Risk With PIAs and DPIAs: When to run a privacy or data protection impact assessment.
  7. GDPR Data Subjects: The rights people have over their personal data.
A 5Mins certificate of completion for GDPR Essentials (EU), lying on a desk next to a laptop
Certificate

A certificate for every learner who completes it

Learners finish every microlesson and complete the assessments. 5Mins then issues a certificate of completion for GDPR Essentials (EU).

  • Certificates and e-signatures stored against each learner
  • Audit-ready records, ready whenever an auditor asks
  • Completion shows on the Compliance Dashboard in real time
Audience and regulation

Who it's for and the law it covers

Who it's for

  • Every employee in the EU who handles personal data
  • Managers who are accountable for how their teams collect, use and store data
  • Teams that work with EU customers, employees or suppliers
  • New joiners who need a clear baseline in their first weeks

Laws covered

  • General Data Protection Regulation, Regulation (EU) 2016/679. The EU's data protection law, in force since 25 May 2018, covering lawful processing, data roles, security, breaches and data subjects' rights.
  • Article 33 GDPR. Controllers must notify the supervisory authority of a personal data breach without undue delay and, where feasible, within 72 hours of becoming aware of it, unless it is unlikely to result in a risk to people's rights and freedoms.
How it runs in 5Mins

Assign it once, then let 5Mins do the chasing

Every course in the 5Mins library runs on the same zero-admin engine.

  • EnrollAuto-enroll

    Enroll people automatically from your HR system, with 100+ HRIS platforms supported.

  • RemindReminders

    Nudges by email, Slack, Microsoft Teams and push until the course is done.

  • RepeatRecurrence

    Set the course to repeat, for example every 12 months, and 5Mins re-enrolls people for you.

  • CertifyCertificates

    Certificates and e-signatures are issued and stored for every completion.

  • ProveAudit-ready records

    See who is complete, at risk or overdue on the Compliance Dashboard, and prove it any time.

Customer stories

Compliance teams that swapped chasing for results

Compliance, HR and L&D leaders on what changed when they moved their training to 5Mins. Pick a team to see what changed.

ComplianceCompliance Training Insurance, 205 colleagues 100%

compliance completion and pass rate since go-live

  • ~1 day saved on each compliance course (HR estimate)
  • Automated reminders and reporting

Since go-live, our compliance completion and pass rates are 100%, and it's the quickest we've ever got there. Automated reminders and reporting save us about a day per course.

Laura ChappellLaura ChappellHR Director, Collingwood
Read the Collingwood story
ComplianceCompliance Training Insurance and emergency accommodation 87%

less session time, from 2.5-3 hour sessions to modules of 25 minutes at most

  • 12 monthly sessions a year, up from 3-4
  • 95% content creation time saved

Our compliance sessions used to be two and a half to three hours in a room, and we could fit in three or four a year. Now we cover one topic a month, and I can see exactly what people are retaining.

Lucy WybornLucy WybornDirector of Learning and Development, ICAB
Read the ICAB story
ComplianceCompliance Training Legal services 80%

completion on mandatory training, up from 20%

  • Mobile microlessons finished between calls
  • Manager view of each team's progress

We were sitting at 20% completion on our mandatory training. We're now at 80%. People finish short lessons between calls, on mobile, and managers can see where their teams are, so chasing completion is no longer a one-person job.

Jamie WaltonJamie WaltonGroup Learning and Development Officer, Winn Solicitors
See more customer stories
ComplianceCompliance Training Fintech and digital banking On demand

training log showing who did what, when, and the pass rate

  • Any device phone or laptop, at their own pace
  • Rolling refreshers through the year

When I engage with the FCA, I can show that every team has had training tailored to their role, that it's up to date, and that it runs throughout the year, with a full log of who's done what.

Abdul GofurAbdul GofurHead of Compliance & Anti-Financial Crime, nsave
Read the nsave story
★ Free sample lesson

See 5Mins in action with a free sample lesson

Interested in EU GDPR Essentials training? Request a free sample lesson, book a short demo with our team, and we'll share your sample lessons after the call.

  • Real microlessons from our library
  • A short demo with our team
  • No card needed

Get a free sample lesson

Use your work email so we can arrange your demo.

We'll use your details to arrange your demo and contact you about 5Mins. See our privacy policy.

Free course catalogues

Take the catalogue with you

Free PDF catalogues to share with your compliance lead, your managers or your board.

Global Compliance Catalogue cover
Compliance

Global Compliance Catalogue

Stay compliant across every market you operate in, with regulatory training covering GDPR, data protection, workplace safety and more.

Browse all course catalogues

Your questions answered

Questions about EU GDPR Essentials training

How long is the GDPR Essentials course?

It's made up of 7 microlessons, each under 5 minutes. Learners can finish it in one sitting or spread it over a few days, and 5Mins sends reminders until it is done.

Is there a certificate?

Yes. Learners get a certificate of completion once they finish every microlesson and complete the situational tests. The record is stored in 5Mins for audits.

Is this course for the EU or the UK?

This version is built around the EU GDPR. 5Mins also has GDPR Essentials (Global) and UK GDPR & Data Law: The Data (Use and Access) Act 2025 Update for UK teams.

Is GDPR training a legal requirement?

The GDPR doesn't set a training curriculum, but it requires organizations to take appropriate measures to protect personal data and be able to show it. Staff training is one of the most common ways to do this.

Who needs GDPR training?

Everyone who handles personal data at work, from HR and customer service to sales, marketing and IT.

How often should staff take GDPR training?

There is no fixed frequency in the GDPR. In 5Mins you can set the course to repeat, for example every 12 months, so refreshers happen automatically.

Can I try the course first?

Yes. Request a free sample lesson and book a short demo with our team. After your demo, we'll share sample lessons with you so you can see the format for yourself.

Get started

Give your people compliance training they'll actually enjoy

Assign EU GDPR Essentials and 5,000+ other micro courses in minutes, or turn your own policies into microlessons with AI Studio.

Start free trial