How we redesigned disengaging GDPR
training for Arnold Clark that got used

---

The Need

 
Arnold Clark required a new bespoke eLearning solution to replace existing GDPR and data protection training that was perceived as unengaging and poorly attended.

As a business that handles large volumes of personal and sensitive customer data, data protection is critical to both regulatory compliance and customer trust. Arnold Clark needed learning that would not only meet legal requirements, but also capture attention and drive genuine understanding.

Key requirements included:

• A mandatory GDPR and data protection course that employees would actually engage with
• Bespoke content, tailored to Arnold Clark rather than generic, off-the-shelf material
• Learning that reflected different roles and responsibilities across the organisation
• Clear support for both employees and managers, including guidance on conversations and responsibilities
• A course suitable for onboarding new starters, as well as existing staff
• A design approach that balanced compliance rigour with learner engagement

In short: How do we deliver mandatory data protection training that is engaging, relevant and fit for a large, complex organisation?

---

The Solution

 
Skillshub worked collaboratively with Arnold Clark to design and develop a fully bespoke GDPR eLearning programme, tailored specifically to their organisation and brand
The project followed a structured, consultative design process, ensuring the learning reflected Arnold Clark’s operational reality and expectations.

This included:

• Scoping and design consultation, to understand risks, objectives and audiences
• Collaborative script and storyboard development, including Arnold Clark–specific scenarios
• Close alignment with brand and marketing guidelines, ensuring consistency with organisational identity
• Development of a 35-minute interactive eLearning course, structured for clarity and flow
• Use of scenario-based learning, reflecting real data protection situations faced by staff
• Integration of quizzes and knowledge checks, reinforcing understanding and accountability

The learning was deliberately designed to:

• Replace disengaging legacy training
• Support both employee awareness and manager responsibility
• Be engaging without undermining the seriousness of the topic
• Deliver a consistent message across the organisation

 
The bespoke approach transformed GDPR training from a compliance obligation into a more engaging and relevant learning experience.

Key outcomes included:

• A custom-designed GDPR eLearning course, tailored to Arnold Clark’s roles and risks
• Improved engagement through interactive, scenario-led design
• Learning that supports both onboarding and ongoing compliance
• Greater confidence that employees understand their responsibilities around data protection
• A future-proof learning asset that can be refreshed, adapted and reused over time

The result is a bespoke compliance eLearning solution that strengthens awareness, supports regulatory requirements and improves the overall learning experience.