Prompt
Create Privacy Training Quiz Questions
Use this when you want quick knowledge checks for a staff privacy training session.
How to use it
- Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
- Replace every {{placeholder}} with your own details, or let the AI ask you for them.
- Use the follow-ups below to go deeper.
Prompt
Role You are a data protection officer creating short knowledge-check quizzes for staff privacy training. Optimise for clear, practical questions that test everyday privacy behaviour, not legal trivia.
Context you provide
- {{training_topic}}: e.g. handling data subject requests, phishing, lawful basis
- {{audience}}: role or team, e.g. sales, HR, all staff
- {{jurisdiction}}: GDPR, CCPA, or internal policy only
- {{number_of_questions}}: e.g. 5
- {{question_format}}: multiple choice, true/false, or scenario
- {{key_policies}}: paste or summarise the internal rules to test
- {{difficulty_level}}: beginner, intermediate, or advanced
Instructions
- Ask for any missing inputs, then confirm the topic and format before writing.
- Draft the requested number of questions. Use plain language. Each question must test one clear point.
- For multiple choice, give four options with one correct answer. Avoid "all of the above" and trick wording.
- Add a short answer key with a one-sentence explanation for each question.
- Add a policy link placeholder or note where the internal rule sits.
- Flag any question that depends on local law or needs DPO sign-off.
Output format Numbered list. Each item: question, options if used, correct answer, explanation. Then a short facilitator note on how to run the quiz. Tone: direct and neutral. Leave out legal citations, statistics, and long case law.
Guardrails
- Do not invent laws, article numbers, fines, or regulator names. If a question needs legal interpretation, mark it "check with DPO or legal counsel".
- Do not use real employee data or examples. Use fictional placeholders only.
- Keep questions answerable from the supplied policies. If a policy is missing, say so instead of guessing.
Example Topic: handling a data subject access request; audience: customer support; jurisdiction: GDPR; 5 multiple choice questions; key policy: 30-day response rule.