Get a 20% discount on the first year of the Company Training Academy annual plan.
Limited-time offer – ends April 24, 2025
Use promo code:
CTA20
  1. Home
  2. Company Training Academy
  3. GDPR Training & Awareness

GDPR Training & Awareness

Train your employees and third-party data processors on GDPR requirements to ensure awareness of data protection principles, privacy rights, and regulatory compliance.

GDPR Training & Awareness - Advisera

The quickest route to company-wide GDPR training

A set of 48 videos that explain all key aspects of the EU General Data Protection Regulation (GDPR), including data subject rights, lawful processing, breach response, and consents – configure the whole training & awareness program in a couple of minutes, and enable each employee to watch videos on their devices.

On the left-hand side, you can see one of the videos from the GDPR Training & Awareness available in Advisera’s Company Training Academy.

GDPR lessons library

  • What is EU GDPR and where does it apply? (1:35)
    EU GDPR: Protecting data rights and setting global standards for personal data processing.
    EU GDPR Article 2
  • Which frameworks are related to GDPR? (1:33)
    Leveraging ISO standards (27701, 27001, 29100) and OECD guidelines to reinforce GDPR best practices.
    EU GDPR Article 5
  • Key terms in GDPR (6:34)
    Essential GDPR vocabulary covering personal data, processing, roles, and data protection techniques.
    EU GDPR Article 4
  • Key roles according to GDPR (2:07)
    Key GDPR roles: Controllers, processors, DPOs, and supervisory authorities shape compliance responsibilities.
    EU GDPR Article 4, 24, 26, 28, and 37
  • Business activities that are impacted the most by GDPR (1:53)
    Discover how GDPR affects diverse business functions, from Marketing and IT to HR and beyond.
    EU GDPR Article 2
  • Six legitimate purposes of processing personal data according to GDPR (3:58)
    Six legitimate processing purposes under GDPR: from contracts to consent
    EU GDPR Article 6
  • What are the main GDPR principles? (2:58)
    GDPR principles: lawfulness, fairness, transparency, purpose limitation, minimisation, accuracy, security, and storage limits.
    EU GDPR Article 5
  • Real-world example for understanding main GDPR principles (4:10)
    How GDPR’s principles—transparency, minimisation, consent, and timely deletion—apply in practice.
    EU GDPR Article 5, 6, 7, and 25
  • The basics of Privacy Notices according to GDPR (2:31)
    Clear disclosures on data processing to ensure transparency under GDPR.
    EU GDPR Article 12, 13, and 14
  • Contents of a Privacy Notice according to GDPR (2:04)
    Clear, plain disclosures on data collection, processing, rights, contacts, and safeguards
    EU GDPR Article 13 and 14
  • What is GDPR Inventory of Processing Activities (4:58)
    How to build and maintain an Inventory of Processing Activities to meet GDPR requirements.
    EU GDPR Article 30
  • What is GDPR personal data retention (2:05)
    What does data retention mean, and how to ensure compliance with GDPR requirements.
    EU GDPR Article 5
  • Responsibilities for fulfilling GDPR requirements for inventory and retention (3:01)
    How to define clear roles and processes for maintaining GDPR inventories and retention schedules.
    EU GDPR Article 5, 24, and 30
  • The content of GDPR Inventory of Processing Activities for controllers (1:19)
    Inventory for controllers: DPO, processing purposes, data categories, recipients, transfers, retention limits, and safeguards.
    EU GDPR Article 30
  • The content of GDPR Inventory of Processing Activities for processors (1:17)
    Essential details on sub-processors, controllers, processing categories, and data transfers.
    EU GDPR Article 30
  • GDPR Consent – The basics (2:42)
    What is GDPR consent is, and what its key requirements are?
    EU GDPR Article 6 and 7
  • How and when to ask for GDPR consent (1:49)
    Learn how and when to request consent under GDPR, ensuring transparency and user choice.
    EU GDPR Article 7 and 8
  • Data subject rights according to GDPR (3:24)
    Learn how data subject rights empower individuals to control their personal data under GDPR.
    EU GDPR Article 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, and 23
  • Basic GDPR rules for data subject access rights (2:01)
    DSAR basics, from valid request formats to response timelines.
    EU GDPR Article 15
  • Handling DSAR requests according to GDPR (1:20)
    DSAR best practices, response timelines, and identity verifications under GDPR.
    EU GDPR Articles 12, 13, 14, and 15
  • DSAR exemptions and rejections according to GDPR (2:31)
    How to handle DSAR queries, typical exemptions, and valid grounds for rejections.
    EU GDPR Article 12 and 23
  • What is Data Protection Impact Assessment (DPIA) according to GDPR? (2:05)
    How DPIAs help identify and mitigate risks in data processing.
    EU GDPR Article 35
  • DPIA Step 1 according to GDPR: Listing and grouping data processing activities (1:04)
    How to identify and group data processes for assessment.
    EU GDPR Article 35
  • DPIA Steps 2 and 3 according to GDPR: The threshold questionnaire & determining if DPIA is needed (1:45)
    How high-risk processing is identified accurately with a threshold questionnaire.
    EU GDPR Article 35
  • DPIA Steps 4, 5 and 6 according to GDPR: Answer the DPIA questionnaire, identify and list key security risks (2:40)
    What is needed for DPIA steps and how to address key security risks
    EU GDPR Article 35
  • Step 7 DPIA according to GDPR: Recording the implementation; maintenance (1:02)
    Regular DPIA reviews keep safeguards updated and documented for compliance.
    EU GDPR Article 35
  • What is Data Protection by Design and by Default according to GDPR? (2:00)
    Data Protection by design and by Default concepts for building data protection into processes and systems
    EU GDPR Article 25
  • GDPR policies to be implemented to ensure security of personal data (5:26)
    Key policies that support secure data practices and mitigate privacy risks.
    EU GDPR Article 32 and 24
  • Best practices to implement GDPR Data Protection by Design and by Default policies (2:16)
    Key steps for defining and maintaining GDPR Data Protection by Design and by Default policies.
    EU GDPR Article 24, 25, and 32
  • Introduction to GDPR data transfers (2:06)
    Managing personal data transfers, adequacy measures, and GDPR compliance.
    EU GDPR Article 44, 45, 46, 47, 48, 49, and 50
  • How can GDPR data transfers be enabled? (2:55)
    How to choose suitable mechanisms for lawful international data transfers
    EU GDPR Article 45, 46, 47, 48, and 49
  • Managing third parties according to GDPR (1:57)
    How to ensure GDPR compliance when engaging third-party processors and service providers
    EU GDPR Article 26, 28 and 29
  • GDPR basic rules for data breaches (3:40)
    When personal data is exposed or stolen: rules for compliance and best practices.
    EU GDPR Article 33 and 34
  • Data breach response according to GDPR (1:14)
    Swift actions and logging procedures to address data breaches.
    EU GDPR Article 33 and 34
  • GDPR data breach notifications (1:29)
    Essential guidelines for data breach notifications under GDPR.
    EU GDPR Article 33 and 34
  • What to do after a data breach according to GDPR (1:04)
    How to evaluate data breaches, contain damage, and prevent future risks.
    EU GDPR Article 32, 33, and 34
  • Why does a company need a DPO? (2:18)
    Key details about the DPO’s role, appointment, and responsibilities.
    EU GDPR Article 37, 38, and 39
  • The responsibilities of the DPO (4:16)
    Detailed obligations, tasks, and best practices for a DPO under GDPR
    EU GDPR Article 39
  • Responsibilities towards the DPO (1:09)
    Ensuring DPO independence, resources, and timely involvement.
    EU GDPR Article 38
  • Define a GDPR Personal Data Protection Policy (3:57)
    How to define a personal data protection policy for clear GDPR alignment.
    EU GDPR Article 5, 24, and 32
  • Setting up privacy governance for GDPR (1:36)
    Arranging departmental champions, boards, and consistent reviews for privacy compliance
    EU GDPR Article 5, 24, and 25
  • Key steps in your GDPR project (2:55)
    Key steps to launch or refine GDPR compliance within an organization.
    EU GDPR Article 5, 6, 30, 32, and 35
  • Conducting a GDPR Gap Analysis (2:47)
    Identify, assess, and address key GDPR requirements through a gap analysis.
    EU GDPR Article 5 and 24
  • GDPR Awareness and Training (4:38)
    How to plan effective GDPR awareness and training across teams and tasks.
    EU GDPR Article 24 and 39
  • Methods for sustaining and improving GDPR compliance (1:34)
    How to sustain and improve GDPR compliance in a changing environment.
    EU GDPR Article 24 and 25
  • Handling existing contracts with third parties to comply with GDPR (3:00)
    How to align third-party agreements with GDPR requirements.
    EU GDPR Article 26 and 28
  • Handling new contracts with third parties according to GDPR (3:30)
    Ensuring robust selection, contractual terms, and ongoing reviews under GDPR.
    EU GDPR Article 26 and 28
  • Regular GDPR reviews and improvement actions (2:41)
    Regular checks on DPIAs, DSAR handling, and staff training to keep compliance alive.
    EU GDPR Article 24, 32, and 35

Training adjustable for different audiences

Instead of showing the same videos to everyone, you can configure the system so that senior management will see only the videos appropriate for them, IT employees will see different videos, the rest of the employees something else, etc.

Advisera’s Company Training Academy will suggest the most appropriate videos for different audiences, but you’re in control — you define who gets to see what.

GDPR Training & Awareness - Advisera
GDPR Training & Awareness - Advisera

Automate training delivery and tracking

You don’t have to torture yourself with organizing a live training that lasts longer than anyone wants to attend. Instead, use Advisera’s Company Training Academy to define how often employees need to watch videos, automatically send email invitations to watch them, track who watched each video, send reminders, and create attendance reports for audit purposes.

Made for easy learning

Let’s face it — people don’t have time to learn about cybersecurity, and most have a hard time understanding techy or lawyer language.

This is why our videos are between 2 and 10 minutes long, and our GDPR experts explain the topics using easy-to-understand language.

GDPR Training & Awareness - Advisera

Several languages available

We’re translating the videos into all major languages of the European Union, so that any employee in your company can easily understand them.

Custom-made videos

Do you have specific privacy policies or procedures that you’d like to present in a video? No problem! As part of selected plans, we can create custom videos exclusively for your company — personalization has never been easier.

You can also upload the videos you created to complement Advisera’s training videos.

GDPR Training & Awareness - Advisera
Select the number of users for which you want to set up training
Monthly plan

10 users included

€14 / month

14-day free trial*

Unlimited access to all videos

Access to any training and awareness video about cybersecurity, ISO 27001, NIS2, DORA, or GDPR, in any language, for any of your employees

Access to translated videos

Currently, all NIS2 and cybersecurity videos are translated and available in Croatian, French, and Dutch.

Country-specific videos

When a particular EU country publishes its own laws and regulations based on, e.g., NIS 2, we will create videos that address those additional requirements.

Adapt training for audiences

Create separate training programs for senior management, mid-level management, IT employees, all other employees, etc. so that each group watches only the videos relevant to them.

Set training schedule

Choose daily, weekly, monthly, or other frequencies of watching training videos.

Automatic notifications

Configure automatic email notifications sent to employees about upcoming and overdue training videos.

Track employees’ progress

See exactly who has attended which training video, who is late, and testing results; download reports in PDF.

Quizzes and tests

Decide for each training program how you want to test the attendees.

Upload your own materials

Upload your own videos and documents, and add them to existing training programs.
(coming soon)

Custom-made videos

Based on your script, we will produce training videos (up to 10 minutes per video) that you can use within the Company Training Academy.
(available in yearly plans with 100 or more users)

In-house live online training

Customized interactive webinar delivered by our expert for your company – up to 1 hour, up to 500 attendees.
(available in yearly plans with 500 or more users)
Subscribe

Start Free Trial

Save 20% on the first year!Use promo code: CTA20
Yearly plan

10 users included

€154 / year

14-day free trial*

Unlimited access to all videos

Access to any training and awareness video about cybersecurity, ISO 27001, NIS2, DORA, or GDPR, in any language, for any of your employees

Access to translated videos

Currently, all NIS2 and cybersecurity videos are translated and available in Croatian, French, and Dutch.

Country-specific videos

When a particular EU country publishes its own laws and regulations based on, e.g., NIS 2, we will create videos that address those additional requirements.

Adapt training for audiences

Create separate training programs for senior management, mid-level management, IT employees, all other employees, etc. so that each group watches only the videos relevant to them.

Set training schedule

Choose daily, weekly, monthly, or other frequencies of watching training videos.

Automatic notifications

Configure automatic email notifications sent to employees about upcoming and overdue training videos.

Track employees’ progress

See exactly who has attended which training video, who is late, and the testing results; download reports in PDF.

Quizzes and tests

Decide for each training program how you want to test the attendees.

Upload your own materials

Upload your own videos and documents, and add them to existing training programs.
(coming soon)

Custom-made videos

Based on your script, we will produce training videos (up to 10 minutes per video) that you can use within the Company Training Academy.
(available in yearly plans with 100 or more users)

In-house live online training

Customized interactive webinar delivered by our expert for your company – up to 1 hour, up to 500 attendees.
(available in yearly plans with 500 or more users)
Subscribe

Start Free Trial

* You can test how the Company Training Academy works for free for the first 14 days with up to 10 users – no credit card needed.

For all company sizes, all industries

All videos are created to be relevant for small, medium, and large companies, and also for all industries — no matter if your company is a small SaaS provider or a large water utility, your employees will find these videos very appropriate.

In other words, any company complying with the GDPR regulation will find these videos to be the right fit.

Frequently Asked Questions

What is the Company Training Academy?

The Company Training Academy is a learning management system (LMS) that enables you to configure various training and awareness programs for your entire workforce for, e.g., NIS2, DORA, ISO 27001, GDPR, security awareness, etc.

How long does it take to set up training and awareness?

Opening a client account takes less than a minute. The wizard will then guide you through the process of setting up your first training and awareness program, which usually takes 5–10 minutes.

How does the free trial work?

During the 14-day free trial, you will get access to all training & awareness videos, but you will be limited to 10 users. Some more advanced features will be accessible when you upgrade your account. No credit card required.

What forms of payment do you accept?

We accept payment via any major credit or debit card; for a larger number of users, you can pay via wire transfer from your bank account.

How does the Company Training Academy compare to Advisera’s courses?

Advisera’s courses are intended for individuals who want to get in-depth knowledge about a particular framework, while the Company Training Academy is intended for companies that want to automate training and awareness for all of their employees, and track their progress.

Which standards and regulations are covered in the Company Training Academy videos?

Currently, the videos cover NIS2, DORA, ISO 27001, GDPR, and cybersecurity awareness training.

We’re working on adding videos for other standards and regulations.

Are videos available in languages other than English?

NIS2 and cybersecurity awareness videos are also available in French, Dutch, and Croatian. We are working on adding more languages – contact us to learn about available languages.

Is there a time limit for attending the training?

No, your users can spend as much time as they like attending the lessons, as long as your subscription is active.

What will the users need to access the lessons?

Your users can access the lessons using PC, Mac, or mobile devices, using any major browser (e.g., Chrome, Mozilla, Edge, Safari); a broadband Internet link will also be needed.

What is the format of the training, and how long does it take?

The lessons are a combination of video lectures, quizzes, and test questions. The average time needed per lesson is between 5 and 10 minutes. You can configure your training program to include only a couple of lessons, or several dozen lessons.

What prior knowledge is needed to attend the training?

None. The lessons are created in such a way that a beginner can easily understand them. They are very easy to follow for any type of employees — senior or mid-level management, non-IT employees, tech people, etc.

How can I upgrade my account if I need more users?

Simply click the purchase button for the required number of users in the pricing table, and, after the payment is processed, your Company Training Academy will be upgraded automatically.

Please make sure you use the same email address that you use for your existing account, because it is the only way this process can be done automatically. If you decide to make the purchase with a different email address, make sure you contact our support at support@advisera.com so we can upgrade your account manually.

Is it necessary to purchase training and awareness certificates?

No — you can use a Company Training Academy without purchasing certificates. Once your users complete a particular training program, they will be able to download training certificates automatically from their account, at no extra charge.

There are so many videos — how will I find what is the most appropriate for us?

The Company Training Academy will suggest the most appropriate videos based on the framework you’re interested in (e.g., NIS2), and based on your audience (e.g., senior management).

Further, you can filter all the videos in the Library by country, language, relevant clauses and articles of the framework, and other criteria.

Schedule a Demo

Want our expert to walk you through the product? Schedule a short call. We respond quickly.