← All courses

Awareness · Privacy management

GDPR Awareness

Help every employee play their part in protecting personal data.

A practical introduction to the General Data Protection Regulation for teams that process personal data of people in the European Union: the principles, lawful bases, individual rights, breach handling and what each person does at work.

Secure payment by Stripe · for yourself or for your team

Standard and editionRegulation (EU) 2016/679 (GDPR)

Last updated1 October 2026

Preview this course

Experience the learning
before you enrol.

Watch a sample from GDPR Awareness before you enrol.

GDPR AwarenessSample

Learning outcomes

Knowledge you can put to work.

Connect the subject to the responsibilities and decisions people encounter in their roles.

  • Explain the data protection principles and what personal data is
  • Recognise lawful bases and the meaning of consent
  • Respond correctly to a request from a data subject
  • Recognise a personal data breach and know how to report it
  • Understand the roles of controller, processor and data protection officer

Part of: Privacy and Data Protection Training

Inside the course

A clear path through the essentials.

13 modules, 13 practice checkpoints and a final exam. Video runtimes are approximate; allow additional time for the practice questions and the final exam. Modules marked optional can be skipped; the others are studied in any order.

Part 1Module 1Approx. 9 min
  1. What the GDPR is, and why it reaches you9 min
  2. Practice: What the GDPR is, and why it reaches you3 questions
Part 2Module 2Approx. 8 min
  1. Who the GDPR applies to8 min
  2. Practice: Who the GDPR applies to3 questions
Part 3Module 3Approx. 8 min
  1. Personal data and special category data8 min
  2. Practice: Personal data and special category data3 questions
Part 4Module 4Approx. 8 min
  1. Controllers and processors8 min
  2. Practice: Controllers and processors3 questions
Part 5Module 5Approx. 8 min
  1. The seven principles8 min
  2. Practice: The seven principles3 questions
Part 6Module 6Approx. 8 min
  1. Lawful bases and consent8 min
  2. Practice: Lawful bases and consent3 questions
Part 7Module 7Approx. 8 min
  1. People's rights and requests8 min
  2. Practice: People's rights and requests3 questions
Part 8Module 8Approx. 8 min
  1. Security, privacy by design, and breaches8 min
  2. Practice: Security, privacy by design, and breaches3 questions
Part 9Module 9Approx. 8 min
  1. Notices, records, DPIAs, transfers and the DPO8 min
  2. Practice: Notices, records, DPIAs, transfers and the DPO3 questions
Part 10Module 10Approx. 8 min
  1. Fines, accountability and your daily habits8 min
  2. Practice: Fines, accountability and your daily habits3 questions
Part 11Module 11Approx. 7 min
  1. Documents and records that prove compliance7 min · optional
  2. Practice: Documents and records that prove compliance3 questions
Part 12Module 12Approx. 7 min
  1. Sending data abroad, in more depth7 min · optional
  2. Practice: Sending data abroad, in more depth3 questions
Part 13Module 13Approx. 7 min
  1. Everyday scenarios: what would you do?7 min · optional
  2. Practice: Everyday scenarios: what would you do?3 questions

Frequently asked questions

Your questions,
answered.

About GDPR Awareness, its certificate and enrolment.

Ask Sterling
Who is GDPR Awareness Training for?

It is for all staff of organisations that handle personal data of people in the EU, including BPOs, SaaS and IT providers in the Philippines, India, the UAE and elsewhere serving EU clients; for managers who approve tools and suppliers; and for DPOs and privacy leads. No prior data-protection knowledge is needed.

What does the GDPR Awareness course cover?

In plain words, it covers what the GDPR is and whom it applies to; personal data and special category data; controllers and processors; the seven principles; lawful bases and consent; people's rights and requests; security, privacy by design and breaches; privacy notices, records, DPIAs, transfers abroad and the DPO; and fines, accountability and everyday habits.

How long does the GDPR Awareness course take?

The core course is planned as 10 video modules and about 87 minutes of video, with practice questions after each module and a 20-question final exam: about 1 hour 52 minutes. Three optional modules, about 23 minutes, give privacy leads more depth. With 12 months of access, learners go at their own pace.

Do learners receive a certificate?

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for GDPR Awareness Training. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It states that the learner has attended and successfully completed Awareness Training on the EU General Data Protection Regulation (GDPR); it requires the core modules and the final exam.

Is the course online and self-paced?

Yes. GDPR Awareness Training is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

Can we enrol a team, and how much does it cost?

GDPR Awareness Training is US$19 per learner. Teams save 20% for 11 to 50 learners and 30% for 51 to 200 learners; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

Does this course make our organisation GDPR compliant or certified?

No. The Certificate of Completion is a training certificate for one person, and Sterling does not certify organisations. The GDPR is binding law, not a voluntary standard, and no course certificate makes an organisation compliant. This course gives general awareness of the GDPR and is not legal advice; ask your data protection officer or a qualified lawyer.

Is ISO/IEC 27701 certification the same as GDPR compliance?

No. The GDPR is binding EU law, while ISO/IEC 27701 is a voluntary standard for a privacy information management system. A certificate to a standard does not by itself make an organisation compliant with the law. The course explains this difference in its first module, alongside what the GDPR is and why it can reach organisations outside the EU.

Assessment & completion

Complete the learning.
Keep a verifiable record.

Learners who complete the course and its final exam receive a numbered Sterling Academy Certificate of Completion with online QR verification.

This records course completion. It does not confer ISO certification or a professional auditor qualification.

Pass mark
70%
Prerequisites
None
Ask about course requirements

Your next step

Ready to implement GDPR?

Expert and experienced consultants, 8,100+ client engagements in 60+ countries, from gap assessment to a system ready for its certification audit.

Talk to a Sterling consultant

Not sure which course?

Plan your next step
in learning.

Discuss your learning needs