Employee data protection training programme template
- Art. 8 FADP
- Art. 32 GDPR
- Art. 39 GDPR
- About 30 minutes
- Italiano · Deutsch · Français · English
In brief
The programme of data protection training: which sessions, for whom, on which topics and how you check that they were understood. You need it to organise the training and to prove that it took place.
- Who it is for
- Whoever organises the training and the employees who attend it. It stays in the company with the attendance register.
- To decide first
- Read through the sessions and their frequency and adapt them to your organisation; for each session held you complete the date, trainer, format and attendance register.
- Afterwards
- Plan the sessions, have attendance signed and keep the register. Repeat the training at the frequency you have set.
What it contains
- 1Purpose
- 2Organisation
- 3Target groups and sessions
- 4Frequency
- 5Basic session: essential rules
- 6Session 1: fundamentals
- 7Session 2: the organisation's processing activities
- 8Session 3: breaches, rights and everyday security
- 9Safe use of artificial intelligence tools
- 10Assessment of learning
- 11Attendance register
- 12Review
An excerpt
1. Purpose
Most incidents affecting personal data arise from human error: a message sent to the wrong recipient, a shared password, an attachment opened without thinking. This programme defines how __________ trains its employees to reduce these risks and how it keeps a record of the training.
Training is one of the organisational measures by which the organisation ensures data security (Art. 8 FADP) (Art. 32 GDPR). The attendance register makes it possible to demonstrate that it has taken place.
2. Organisation
Person responsible for the programme: __________, __________.
Questions and reports: __________.
3. Target groups and sessions
Employees are divided into three profiles according to the contact they have with personal data.
| Profile | Who belongs to it | Sessions to attend |
|---|---|---|
| A | Those who process personal data regularly or in a sensitive way: management, human resources, administration, IT, customer service | 1, 2 and 3 |
| B | Those who process personal data as part of their daily work: sales, purchasing, operational staff with access to the systems | 1 and 2 |
| C | Those who have limited contact with personal data and all new employees when they join | Basic |
The full text is generated on the platform, with your organisation's details already in place.
Related templates
A template is general information, not advice on your case: it must be adapted to your organisation. For a question on your case there is Advisorn's consulting. By Advisorn, updated on 20 October 2026.