Organization should provide GDPR awareness training to all staff
Medium
Cross-cloud
General
manual-gdpr-training
How to fix it
Provide data protection awareness training to all staff who handle personal data. Include training on data subject rights, breach reporting, data minimization, and privacy principles. Conduct at least annually.
How to verify
- Verify training program documentation
- Confirm training completion records for all relevant staff
- Verify training content covers GDPR requirements
Compliance frameworks
Is your environment compliant with this rule?
CGPulse checks it — and 621 others — against your Azure and AWS accounts with read-only access.
Related Cross-cloud rules
- Block storage volumes must be encrypted
- Cache service security hardening
- Cache services must enforce TLS encryption in transit
- Container registry security hardening
- Database authentication must use managed identities
- Databases must not be publicly accessible
- IAM password policy must require minimum length of 14
- Key management service security hardening