Plotting a course to privacy awareness
Carnival UK employs a large workforce both onboard their cruise ships and in their shoreside offices. The needs of this diverse workforce coupled with a core vision to build and maintain consumer trust, led to Darren and his team devising a privacy training program that ensures all employees have access to the appropriate level of data protection knowledge that their role requires as well as encouraging a privacy-first culture across Carnival’s UK operations. Darren explains, “We want to make sure that the awareness training people receive is commensurate with their needs. A person whose role is to clean the ship’s public areas, for example, is critical to the success of our product, but they don’t need to know the detailed law around data protection. They should have enough underpinning knowledge that if they see something that looks like personal data unattended, they will know to take care of that information and ensure it is handed to responsible management.“
Carnival UK uses a blended learning strategy for its shore-side employees including its contact centre representatives, and more than 15,000 crew members. This blended approach consists of face-to-face sessions, targeted subject area sessions from the privacy team, as well as an e-learning component covered by OneTrust Awareness Training. The training program employs a tiered knowledge approach based on the level of data protection knowledge required within roles, with further training being provided for employees in key decision-making roles.
Taking privacy training onboard
Privacy training for Carnival UK’s employees begins during their induction into the company, through talks and presentations that highlight the importance of data protection to customers, employees, and the company. Darren notes, “Everybody receives a five-minute privacy induction as they join so that from day one, they know its importance to the business”. Further learning is delivered regularly through several resources – including the OneTrust Awareness Training tool – to ensure that a privacy culture can grow within Carnival UK and ensure that data protection is not seen simply as a tick-box exercise. Furthermore, the privacy team at Carnival UK has created a range of themed internal resources for employees to engage with, including posters, newsletter articles, and engagement activities targeted both broadly and within specific functions of the business.