--- title: GDPR Compliance Guide | Free eBook | TSC description: Free GDPR compliance eBook covering data protection principles, employee responsibilities, breach reporting, individual rights and GDPR best practice. image: https://thesecuritycompany.com/hubfs/gdpr-ebook-guide-2.webp --- [Skip to content](https://thesecuritycompany.com/blog/guide-gdpr-ebook#main-content) [![TSC Logo large](https://thesecuritycompany.com/hs-fs/hubfs/TSC%20Logo%20large.png?width=95&height=78&name=TSC%20Logo%20large.png)](https://thesecuritycompany.com/) - [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform) - [Products & Services](https://thesecuritycompany.com/productsandservices) - [Success Stories](https://thesecuritycompany.com/success-stories) - [Resources](https://thesecuritycompany.com/our-resources) - [Blog](https://thesecuritycompany.com/blog) [Book a demo](https://thesecuritycompany.com/contact-us) ![Search icon](https://5018647.fs1.hubspotusercontent-na1.net/hubfs/5018647/Design/Icons/Font%20Awesome/search.svg) [Book a demo](https://thesecuritycompany.com/contact-us) [All posts](https://thesecuritycompany.com/blog/all) July 21, 2026 # Your guide to GDPR   The Security Company  ·  2 minute read ![Notebook showing GDPR and General Data Protection Regulation text, representing GDPR guidance, data protection principles and employee compliance awareness.](https://thesecuritycompany.com/hs-fs/hubfs/gdpr-ebook-guide.webp?width=800&height=450&name=gdpr-ebook-guide.webp) Explore the TSC eBook on GDPR, covering data protection principles, individual rights, breach reporting and the role of the DPO. ## Understanding GDPR: What every employee in your organisation needs to know The ICO receives an average of 1,276 data breach reports every month. Since its introduction in May 2018, GDPR has resulted in enforcement action against organisations including British Airways and Marriott International. The financial and reputational consequences of non-compliance are severe. This eBook cuts through the legal complexity and explains data protection law in plain language. From subject access requests to breach reporting timelines, it covers everything your employees need to understand their responsibilities and protect personal data every day. **In this free eBook, you'll discover:** What GDPR is, why it was introduced and how it applies to your organisation The principles of GDPR and what they mean for how personal data must be handled What counts as personal data and the special categories that require extra protection Individual rights under GDPR, including subject access requests and erasure rights Non-compliance: ICO fines, enforcement notices and reputational damage How to report a data breach within GDPR's mandatory 72-hour notification window The role of your Data Protection Officer (DPO) and when one is required Practical guidance for employees on handling personal data securely every day --- ### Strengthen GDPR compliance across your organisation TSC helps organisations strengthen GDPR compliance through practical awareness training, human risk management and behaviour change programmes that help employees protect personal data with confidence. [View eBook](https://thesecuritycompany.com/hubfs/TSC-Your-guide-to-GDPR.pdf) [Book eLearning demo](https://thesecuritycompany.com/contact-us) --- ## GDPR FAQ ### What is GDPR and who does it apply to? GDPR (General Data Protection Regulation) is EU legislation that governs how organisations collect, store and process personal data. It applies to any organisation handling the data of EU citizens, regardless of where that organisation is based, and, in the UK, sits alongside the Data Protection Act 2018. Non-compliance can result in fines of up to €20 million or 4% of global annual turnover, whichever is greater. ### How long do you have to report a data breach under GDPR? Breaches involving personal or special category data that pose a risk to people's rights and freedoms must be reported to the ICO within 72 hours of discovery. The ICO receives an average of 1,276 data breach reports every month, so employees need to recognise and escalate a suspected breach immediately rather than waiting to be sure. ### What is a Subject Access Request (SAR)? A subject access request lets an individual ask an organisation for a free copy of the personal data it holds about them. Under GDPR, organisations must respond within 30 days, and individuals also have the right to have inaccurate data corrected or erased entirely - often called the "right to be forgotten". --- ## Related pages [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform) [Products & Services](https://thesecuritycompany.com/productsandservices) ## Related posts [![](https://thesecuritycompany.com/hubfs/GDPR-1.webp)](https://thesecuritycompany.com/blog/our-world-has-changed-has-gdpr-evolved-with-it) [ARTICLE](https://thesecuritycompany.com/blog/tag/article) ### [Our world has changed, has GDPR evolved with it?](https://thesecuritycompany.com/blog/our-world-has-changed-has-gdpr-evolved-with-it) [![Digital globe with EU stars and NIS2 text, representing the European NIS2 Directive, cyber security regulation and compliance.](https://thesecuritycompany.com/hubfs/european-network-information-system-NIS-Directive-ebook-guide.webp)](https://thesecuritycompany.com/blog/guide-nis2-directive-ebook) [eBOOK](https://thesecuritycompany.com/blog/tag/ebook) ### [Your guide to the European NIS2 Directive](https://thesecuritycompany.com/blog/guide-nis2-directive-ebook) [![](https://thesecuritycompany.com/hubfs/Gamification.webp)](https://thesecuritycompany.com/blog/3-reasons-to-consider-gamification-as-part-of-your-information-security-programme) [ARTICLE](https://thesecuritycompany.com/blog/tag/article) ### [3 reasons to consider gamification as part of your information security programme](https://thesecuritycompany.com/blog/3-reasons-to-consider-gamification-as-part-of-your-information-security-programme) ![](https://thesecuritycompany.com/hs-fs/hubfs/bug.webp?width=80&height=80&name=bug.webp) ![](https://thesecuritycompany.com/hs-fs/hubfs/bug_white.webp?width=80&height=80&name=bug_white.webp) Go further with emerging threat intelligence, expert analysis and guidance [![TSC White Logo large](https://thesecuritycompany.com/hs-fs/hubfs/TSC%20White%20Logo%20large.webp?width=100&height=82&name=TSC%20White%20Logo%20large.webp "TSC White Logo large")](https://thesecuritycompany.com/) **©** The Security Company (International) Limited 2026 Office One, 1 Coldbath Square, London, EC1R 5HL, UK Company registration No: 03703393 VAT No: 385 8337 51 [linkedin-in icon](https://uk.linkedin.com/company/thesecurityco) [Home](https://thesecuritycompany.com) [Human Risk Platform](https://thesecuritycompany.com/tscs-human-risk-management-platform) **[Products & Services](https://thesecuritycompany.com/productsandservices)** [Contact us](https://thesecuritycompany.com/contact-us) [Privacy &](https://thesecuritycompany.com/tsc-policies)[Cookie Policies](https://thesecuritycompany.com/tsc-policies) [Terms & Conditions](https://thesecuritycompany.com/tsc-policies) **Resources** - [eBooks](https://thesecuritycompany.com/our-resources) - [Reports & Whitepapers](https://thesecuritycompany.com/our-resources) - [Cyber Security Calendar](https://thesecuritycompany.com/blog/security-awareness-calendar) - [Webinars](https://thesecuritycompany.com/our-resources) - [Blog](https://thesecuritycompany.com/blog) Copyright © 2026, The Security Company Ltd ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "The Security Company", "url" : "https://thesecuritycompany.com/blog/author/the-security-company" }, "dateModified" : "2026-07-23T14:40:22.751Z", "datePublished" : "2026-07-21T07:03:21.000Z", "headline" : "GDPR Compliance Guide | Free eBook | TSC", "image" : [ "https://thesecuritycompany.com/hubfs/gdpr-ebook-guide-2.webp" ], "mainEntityOfPage" : { "@id" : "https://thesecuritycompany.com/blog/guide-gdpr-ebook", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://thesecuritycompany.com/hubfs/TSC%20Logo%20large.png" }, "name" : "The Security Company" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://thesecuritycompany.com/#organization", "@type" : "Organization", "description" : "Cyber security awareness training and human risk management for businesses of every size.", "logo" : "https://thesecuritycompany.com/hs-fs/hubfs/TSC%20Logo%20large.png?width=190&height=156&name=TSC%20Logo%20large.png", "name" : "The Security Company", "sameAs" : [ "https://www.linkedin.com/company/thesecurityco/", "https://www.youtube.com/@thesecurityco", "https://vimeo.com/user31176192", "https://thecpdregister.com/providers/cpd-group-providers--790118", "https://ico.org.uk/ESDWebPages/Entry/Z4812822", "https://find-and-update.company-information.service.gov.uk/company/03703393", "https://registry.blockmarktech.com/certificates/19d457f5-bf79-4f85-8f6e-dd2db181ff76/", "https://www.gartner.com/reviews/product/the-security-company-security-awareness-training" ], "url" : "https://thesecuritycompany.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://thesecuritycompany.com/#website", "@type" : "WebSite", "name" : "The Security Company", "publisher" : { "@id" : "https://thesecuritycompany.com/#organization" }, "url" : "https://thesecuritycompany.com/" } ```