Hi there,

We are currently implementing an LMS and the topic of data protection has come up. Does anyone have any tips/experience with this?

I see personal data in E-Learning as manifesting itself in 2 areas:

1) Personal LMS user information, office addresses and training history attached to an individual user + login

2) Training topic + course content information held inside the LMS (e.g. a SAP training topic activated from the LMS, such as a simulation showing screenshots of real external account customer names, SAP, bank account numbers etc...)

However, conflicting info I have reviewed on the internet suggests that any company-internal only HR records (ergo training records...) are automatically exempt from data protection acts.

Any ideas?