Games Contact us
Select Page

GDPR Patrol

KurumsPlay

Games / Law

GDPR Patrol

Ten everyday moments with personal data at work. Decide whether each is fine as is, needs a fix, or is likely a personal data breach. You have five hearts.

MediumLaw2 minNew

GDPR Patrol is a learning aid, not legal advice. It follows EU and UK GDPR; Turkey’s KVKK rests on similar principles.

How to play GDPR Patrol

Each round describes something that happened with personal data. Choose Fine as is, Needs a fix or Likely a data breach, then press Check. After every answer you get the rule in one sentence.
A correct answer scores 10 XP and a perfect run adds 20 XP. A wrong answer costs one of your five hearts. The ten rounds are drawn from a set of fourteen, so every game is different.

Breach or compliance gap?

Under the GDPR, a personal data breach is a security incident that leads to personal data being destroyed, lost, altered, disclosed or accessed without authorisation. It is not every mistake. Emailing a salary file to the wrong person is a breach. Keeping CVs for too long is not a breach, but it does break the rules on storage and needs fixing.

What to do when there is a breach

Contain it, record it and assess the risk to the people affected. If the breach is likely to put their rights at risk, the regulator must be told within 72 hours of the company becoming aware of it. If the risk is high, the people themselves must be told too. Every breach goes in an internal log, even the ones that are not reported.

The principles behind the fixes

  • Lawful basis. Every use of personal data needs one, such as a contract, a legal obligation or valid consent.
  • Consent is active. Pre-ticked boxes and cookies set before the visitor agrees do not count.
  • Data minimisation. Collect only what the purpose needs.
  • Storage limitation. Delete data once you no longer need it.
  • Transparency. Tell people what you collect and why, including when you record them on camera.
  • Security. Encryption, access control and prompt removal of leavers’ accounts prevent most breaches.
Turkey’s KVKK, California’s CCPA and many other laws share these principles. The data privacy guide and the law section on Kurums compare them. For a security warm-up, play Phish or Legit or browse the free business tools.

More games

Bottleneck Buster

Ten production lines. Find the step that limits everything else.

MediumOperations · 3 min

Safe or Risky AI?

Ten ways people use AI at work. Spot the ones that put the company at risk.

EasyTechnology · 2 min

Ledger Letters

A new five-letter business word every day. Six guesses to find it.

MediumFinance · 3 min

See all games

Law guides

Free Legal Document Templates & Generators (2026): 16 Free Plans Compared

Free Legal Document Templates & Generators (2026): 16 Free Plans Compared

, ,

Free legal document templates verified October 2026: Y Combinator SAFE, NVCA model documents, Series Seed (CC0), Cooley GO, Orrick start-up forms, Common Paper (2 free sends/month), PandaDoc Free eSign, Termly, iubenda, GetTerms, TermsFeed, Law Insider, SEC EDGAR, ACAS, GOV.UK model articles, LegalZoom — what is free, licences, limits. Docracy and FormSwift closed; Rocket Lawyer, LawDepot, eForms trial-only.

read more