{"id":35562,"date":"2025-09-29T09:26:43","date_gmt":"2025-09-29T09:26:43","guid":{"rendered":"https:\/\/grapenordic.com\/are-your-employees-gdpr-compliant-in-practice\/"},"modified":"2026-10-04T18:26:21","modified_gmt":"2026-10-04T18:26:21","slug":"are-your-employees-gdpr-compliant-in-practice","status":"publish","type":"post","link":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/","title":{"rendered":"Are your employees GDPR compliant in practice?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">GDPR is not just for the DPO. It\u2019s everyday decisions that determine whether you are compliant. <\/p>\n\n<p class=\"wp-block-paragraph\"><span class=\"TextRun SCXW235283905 BCX0\" lang=\"DA-DK\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW235283905 BCX0\">Are you on top of GDPR? Many would say yes \u2013 because the courses have been completed and the policies are in a folder somewhere. <\/span><\/span><span class=\"LineBreakBlob BlobObject DragDrop SCXW235283905 BCX0\"><span class=\"SCXW235283905 BCX0\"> <\/span><br class=\"SCXW235283905 BCX0\"\/><\/span><\/p>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">But in practice, we see again and again that the breaches happen in small ways:<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<ul class=\"wp-block-list\">\n<li><span data-contrast=\"none\">A misdirected email with no clear response<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/li>\n\n\n\n<li><span data-contrast=\"none\">Uploading customer data to an AI service like ChatGPT<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/li>\n\n\n\n<li><span data-contrast=\"none\">A form that still asks for information without a valid basis<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">\u00a0<\/p>\n\n<h2 class=\"wp-block-heading\">GDPR <span style=\"color: #e96569;\">COMPLIANCE<\/span><\/h2>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Compliance is not just about law. It\u2019s about habits, processes and behaviors throughout the organization \u2013 from HR and IT to sales and reception. <\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">We\u2019ve put together 12 concrete questions to help you find out:<br\/>\u2013 Where do you stand strong?<br\/>\u2013 Where is there a risk of breakage?<span data-ccp-props=\"{{{wpml_tag_9}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_10}}}\"> <\/span><\/p>\n\n<h2 class=\"wp-block-heading\"><span class=\"TextRun MacChromeBold SCXW210627042 BCX0\" lang=\"DA-DK\" data-contrast=\"none\">12 QUESTIONS FOR GDPR COMPLIANCE IN PRACTICE<br\/><\/span><\/h2>\n\n<ol class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\"> Email sent in error \u2013 what then?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Do employees know what to do if they accidentally send an email with personal data to the wrong person?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: An HR employee sends an employment contract to the wrong recipient.<br\/>\u2192 Is there a known reaction and escalation?<span data-ccp-props=\"{{{wpml_tag_10}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_11}}}\"> <\/span><\/p>\n\n<ol start=\"2\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">Lost laptop or mobile \u2013 what is the procedure?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Is there a clear process for lost devices \u2013 and do employees know it?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: IT is notified, incident is recorded, data is assessed \u2013 but only if the employee knows what to do.<br\/><span data-ccp-props=\"{{{wpml_tag_7}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_8}}}\"> <\/span><\/p>\n\n<ol start=\"3\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">Forms and data minimization \u2013 are you collecting only what you need?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Is it documented why you are collecting the data you are asking for?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: An old enrollment form contains a field for \u201cparent\u2019s social security number\u201d \u2013 but no one has considered why.<br\/>\u2192 How do you ensure data minimization over time?<span data-ccp-props=\"{{{wpml_tag_10}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_11}}}\"> <\/span><\/p>\n\n<ol start=\"4\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">Reusing data \u2013 without new consent?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Do you check if it is legal to use data for a new purpose \u2013 and do you inform the user?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: Can a customer\u2019s email be used for both purchase and newsletter?<span data-ccp-props=\"{{{wpml_tag_7}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_8}}}\"> <\/span><\/p>\n\n<ol start=\"5\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">Consent \u2013 is it documented?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Have you documented what legal basis you use \u2013 and how it was obtained?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: A check mark in a form is not enough if there is no clear text and documentation.<span data-ccp-props=\"{{{wpml_tag_7}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_8}}}\"> <\/span><\/p>\n\n<ol start=\"6\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">Explanation \u2013 can you justify data usage?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Can employees explain why certain data is collected \u2013 and refer to policies?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: A receptionist asks for ID \u2013 but why? Where does it say?<span data-ccp-props=\"{{{wpml_tag_7}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_8}}}\"> <\/span><\/p>\n\n<ol start=\"7\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">Who owns and updates the data?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Do employees know who is responsible for correct and up-to-date data?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: Who updates contact information or consent status?<span data-ccp-props=\"{{{wpml_tag_7}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_8}}}\"> <\/span><\/p>\n\n<ol start=\"8\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">Do you delete data when you need to?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Are there routines for deletion \u2013 and documentation?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: Are candidates deleted from the recruitment system after 6 months?<span data-ccp-props=\"{{{wpml_tag_7}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_8}}}\"> <\/span><\/p>\n\n<ol start=\"9\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">Secure sharing \u2013 and approved tools?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Is everyone using approved systems \u2013 and sharing data securely?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: Dropbox personal vs. corporate SharePoint \u2013 do employees know the difference?<span data-ccp-props=\"{{{wpml_tag_7}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_8}}}\"> <\/span><\/p>\n\n<ol start=\"10\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">Do you know your role in requests?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Can employees handle or forward requests correctly?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: A customer asks for insights \u2013 can support respond?<span data-ccp-props=\"{{{wpml_tag_7}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_8}}}\"> <\/span><\/p>\n\n<ol start=\"11\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">Do you know what the 72-hour deadline means?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Are employees equipped to act quickly in the event of a breach?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: A USB stick goes missing \u2013 what to do? When does the countdown start?<span data-ccp-props=\"{{{wpml_tag_7}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_8}}}\"> <\/span><\/p>\n\n<ol start=\"12\" class=\"wp-block-list\">\n<li><h3><b><span data-contrast=\"none\">AI and data sharing \u2013 can you share with ChatGPT?<\/span><\/b><\/h3><\/li>\n<\/ol>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Do you have an AI policy \u2013 and do employees understand it?<\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\">Example: An employee uploads a customer report to ChatGPT to write a summary.<br\/>\u2192 Do you know what can be shared with AI services?<span data-ccp-props=\"{{{wpml_tag_10}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335551550&quot;:0,&quot;335551620&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_11}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\"><b><span data-contrast=\"none\"> <\/span><\/b><\/p>\n\n<h2 class=\"wp-block-heading\"><span class=\"TextRun MacChromeBold SCXW223150885 BCX0\" lang=\"DA-DK\" data-contrast=\"none\">When GDPR-compliance training needs to turn into behavior<\/span><span class=\"EOP SCXW223150885 BCX0\" data-ccp-props=\"{{{wpml_tag_11}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:299,&quot;335559739&quot;:299{{{wpml_tag_12}}}\"> <\/span><\/h2>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">In many organizations, GDPR training is something you \u201chave done\u201d. But not necessarily something that has changed behavior. <\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">More companies are opting for realistic and targeted awareness training where the rules are translated into everyday situations. <\/span><span data-ccp-props=\"{{{wpml_tag_3}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_4}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\"><b>At Bauhaus(<a href=\"https:\/\/grapenordic.com\/portfolio\/gdpr-hos-bauhaus\">see case<\/a>) <\/b>GDPR and IT security were made concrete with short e-learning modules based on everyday dilemmas.<span data-ccp-props=\"{{{wpml_tag_9}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_10}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\"><b>At EDC(<a href=\"https:\/\/grapenordic.com\/portfolio\/gdpr-compliance-hos-edc\">see case<\/a>) <\/b>awareness became an integral part of the compliance program \u2013 with targeted content and documentation.<span data-ccp-props=\"{{{wpml_tag_9}}}{{{wpml_tag_10}}}\"> <\/span><\/p>\n\n<p class=\"wp-block-paragraph\"><span data-contrast=\"none\">Grape not only delivers <a href=\"https:\/\/grapenordic.com\/online-kurser\/gdpr-compliance-online-kursus\">GDPR training<\/a>, but an entire portfolio of compliance courses. All courses can be customized to your organization \u2013 and combined with your own policies and procedures.  <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>GDPR is not just for the DPO. It\u2019s everyday decisions that determine whether you are compliant. Are you on top of GDPR? Many would say yes \u2013 because the courses have been completed and the policies are in a folder somewhere. But in practice, we see again and again that the breaches happen in small [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":27261,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[43],"tags":[],"class_list":["post-35562","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-e-learning"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.7 (Yoast SEO v28.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Are your employees GDPR compliant in practice?<\/title>\n<meta name=\"description\" content=\"Are you GDPR compliant in your everyday work? Use 12 questions to identify strengths and risks. Concrete examples, simple procedures and focus on behavior.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Are your employees GDPR compliant in practice?\" \/>\n<meta property=\"og:description\" content=\"Are you GDPR compliant in your everyday work? Use 12 questions to identify strengths and risks. Concrete examples, simple procedures and focus on behavior.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/\" \/>\n<meta property=\"og:site_name\" content=\"Grape\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/grapenordic\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-09-29T09:26:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-04T18:26:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/grapenordic.com\/wp-content\/uploads\/2023\/11\/80.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1930\" \/>\n\t<meta property=\"og:image:height\" content=\"1280\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Anders Schultz-M\u00f8ller\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anders Schultz-M\u00f8ller\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/\"},\"author\":{\"name\":\"Anders Schultz-M\u00f8ller\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/person\\\/0315a920897ccb4a87be335c1ddb5803\"},\"headline\":\"Are your employees GDPR compliant in practice?\",\"datePublished\":\"2025-09-29T09:26:43+00:00\",\"dateModified\":\"2026-10-04T18:26:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/\"},\"wordCount\":669,\"publisher\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/80.jpg\",\"articleSection\":[\"E-learning\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/\",\"name\":\"Are your employees GDPR compliant in practice?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/80.jpg\",\"datePublished\":\"2025-09-29T09:26:43+00:00\",\"dateModified\":\"2026-10-04T18:26:21+00:00\",\"description\":\"Are you GDPR compliant in your everyday work? Use 12 questions to identify strengths and risks. Concrete examples, simple procedures and focus on behavior.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/#primaryimage\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/80.jpg\",\"contentUrl\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2023\\\/11\\\/80.jpg\",\"width\":1930,\"height\":1280,\"caption\":\"Blogpost om Articulate Storyline. Kolleger deler viden fra deres Ipads.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/are-your-employees-gdpr-compliant-in-practice\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Frontpage\",\"item\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Are your employees GDPR compliant in practice?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\",\"name\":\"Grape\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\",\"name\":\"Grape\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/grape_logo_hvid-2-1.webp\",\"contentUrl\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/grape_logo_hvid-2-1.webp\",\"width\":433,\"height\":130,\"caption\":\"Grape\"},\"image\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/grapenordic\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/grapenordic\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC2OoQQVitKhGDNqQEH0av0Q\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/person\\\/0315a920897ccb4a87be335c1ddb5803\",\"name\":\"Anders Schultz-M\u00f8ller\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g\",\"caption\":\"Anders Schultz-M\u00f8ller\"},\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/author\\\/anders-schultz-moller\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Are your employees GDPR compliant in practice?","description":"Are you GDPR compliant in your everyday work? Use 12 questions to identify strengths and risks. Concrete examples, simple procedures and focus on behavior.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/","og_locale":"en_US","og_type":"article","og_title":"Are your employees GDPR compliant in practice?","og_description":"Are you GDPR compliant in your everyday work? Use 12 questions to identify strengths and risks. Concrete examples, simple procedures and focus on behavior.","og_url":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/","og_site_name":"Grape","article_publisher":"https:\/\/www.facebook.com\/grapenordic\/","article_published_time":"2025-09-29T09:26:43+00:00","article_modified_time":"2026-10-04T18:26:21+00:00","og_image":[{"width":1930,"height":1280,"url":"https:\/\/grapenordic.com\/wp-content\/uploads\/2023\/11\/80.jpg","type":"image\/jpeg"}],"author":"Anders Schultz-M\u00f8ller","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Anders Schultz-M\u00f8ller","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/#article","isPartOf":{"@id":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/"},"author":{"name":"Anders Schultz-M\u00f8ller","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/person\/0315a920897ccb4a87be335c1ddb5803"},"headline":"Are your employees GDPR compliant in practice?","datePublished":"2025-09-29T09:26:43+00:00","dateModified":"2026-10-04T18:26:21+00:00","mainEntityOfPage":{"@id":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/"},"wordCount":669,"publisher":{"@id":"https:\/\/grapenordic.com\/en\/#organization"},"image":{"@id":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/#primaryimage"},"thumbnailUrl":"https:\/\/grapenordic.com\/wp-content\/uploads\/2023\/11\/80.jpg","articleSection":["E-learning"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/","url":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/","name":"Are your employees GDPR compliant in practice?","isPartOf":{"@id":"https:\/\/grapenordic.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/#primaryimage"},"image":{"@id":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/#primaryimage"},"thumbnailUrl":"https:\/\/grapenordic.com\/wp-content\/uploads\/2023\/11\/80.jpg","datePublished":"2025-09-29T09:26:43+00:00","dateModified":"2026-10-04T18:26:21+00:00","description":"Are you GDPR compliant in your everyday work? Use 12 questions to identify strengths and risks. Concrete examples, simple procedures and focus on behavior.","breadcrumb":{"@id":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/#primaryimage","url":"https:\/\/grapenordic.com\/wp-content\/uploads\/2023\/11\/80.jpg","contentUrl":"https:\/\/grapenordic.com\/wp-content\/uploads\/2023\/11\/80.jpg","width":1930,"height":1280,"caption":"Blogpost om Articulate Storyline. Kolleger deler viden fra deres Ipads."},{"@type":"BreadcrumbList","@id":"https:\/\/grapenordic.com\/en\/are-your-employees-gdpr-compliant-in-practice\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Frontpage","item":"https:\/\/grapenordic.com\/en\/"},{"@type":"ListItem","position":2,"name":"Are your employees GDPR compliant in practice?"}]},{"@type":"WebSite","@id":"https:\/\/grapenordic.com\/en\/#website","url":"https:\/\/grapenordic.com\/en\/","name":"Grape","description":"","publisher":{"@id":"https:\/\/grapenordic.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapenordic.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapenordic.com\/en\/#organization","name":"Grape","url":"https:\/\/grapenordic.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/09\/grape_logo_hvid-2-1.webp","contentUrl":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/09\/grape_logo_hvid-2-1.webp","width":433,"height":130,"caption":"Grape"},"image":{"@id":"https:\/\/grapenordic.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/grapenordic\/","https:\/\/www.linkedin.com\/company\/grapenordic\/","https:\/\/www.youtube.com\/channel\/UC2OoQQVitKhGDNqQEH0av0Q"]},{"@type":"Person","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/person\/0315a920897ccb4a87be335c1ddb5803","name":"Anders Schultz-M\u00f8ller","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g","caption":"Anders Schultz-M\u00f8ller"},"url":"https:\/\/grapenordic.com\/en\/author\/anders-schultz-moller\/"}]}},"_links":{"self":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts\/35562","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/comments?post=35562"}],"version-history":[{"count":0,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts\/35562\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/media\/27261"}],"wp:attachment":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/media?parent=35562"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/categories?post=35562"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/tags?post=35562"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}