GDPR Fundamentals: sample practice worksheet

Fictional practice only. Use invented details; do not enter personal, client or confidential data.
This preview is not a completed assessment, legal opinion, audit or certification.

Exercise: Practical Exercise: A Customer Data Journey
Map collection, cloud storage, marketing use and deletion for a fictional Malaysian business. Identify roles, a plausible lawful basis, a rights request, a breach escalation and a transfer question. Draft a short action list and complete a knowledge check.

1. Describe the fictional organisation, process or system and its scope.

2. Identify three relevant risks or obligations. For each, record a control, owner and evidence you would request.

3. List assumptions, gaps and two questions to ask before relying on the result.

4. Propose one next action and explain how you would check that it worked.

Learning takeaway: A personal data mapping worksheet and a rights-request and breach escalation checklist.

This is introductory awareness training. The Certificate of Completion is not GDPR certification, a DPO qualification or proof that an organisation complies with the GDPR. Organisation-specific legal and implementation questions require further assessment.

Programme: https://orbixtech.my/training-gdpr-awareness-malaysia