Complying with data protection

Complying with data protection means knowing which personal data a project uses, why, on what legal basis, for how long and who can access it. In Europe, the GDPR sets these rules; a data leader makes them part of how projects are run.

A project that ignores them can be stopped by the regulator, fined or rejected by customers and employees. Reusing data for a new purpose, keeping it indefinitely or sending it to a provider without a contract are the most common slips.

In practice: involve the data protection officer early, collect only what the purpose requires, set retention periods, document processing activities and check the contracts of every provider that handles the data.

In the reports of your games, every answer linked to this skill counts: the skill is shown as acquired from 80% of correct answers, and in progress from 50%.