The moment you have a customer file, an email list, a table of employees, you're responsible for that data. It's not just for big companies: it applies to every small business, freelancer, charity. Grasp what it means. 👇
01 · Your responsibility02 · The record03 · Consent…
The game · the responsible reflex
This data — you answer for it
🏢 You run a small business. Three everyday situations: choose the compliant, responsible reaction.
3 situations0 / 3
🏢 Holding other people's data = a responsibility, not an entitlement. The moment you collect information about people (customers, prospects, employees), GDPR applies to you — whatever your size. The basic principles: only collect what's necessary for a specific purpose, get clear consent when required, secure that data (limited access, backups, no plain customer file on a shared computer), and respect people's rights (access, deletion). In case of a serious breach, you must even report it (to the ICO, and sometimes the individuals) within 72 hours. It's not pointless paperwork: it's what protects your customers AND your reputation. This course gives you GDPR in a small-business version — concrete, no lawyer jargon, what you actually need to do.
⚖️ General awareness information, not legal advice. For your specific situation, refer to the ICO or a legal professional.
What this teaches you
Responsible, even when small
📋 GDPR applies to you
A customer or employee file = you're responsible. Company size doesn't matter.
🔐 4 reflexes
Minimise, specific purpose + consent, secure, respect rights. Serious breach → report within 72h.
Check that you got it
2 quick questions
1. GDPR applies to your small business the moment…
Right: as soon as there's personal data, you're responsible, whatever your size.
2. A basic principle for a data holder?
Right: minimise + specific purpose + secure. The foundations of GDPR on the business side.
What to remember
The moment you hold people's data, you're responsible (GDPR), even as a small business.
4 reflexes: minimise, specific purpose + consent, secure, respect rights.
Serious breach → report within 72h. ⚖️ General info, not legal advice.