Go to GDPR fines and find an interesting one from your country. Explain why the fine was issued.
Record a project in DAISY.
Record dataset in DAISY, data declaration as well. Use restrictions and others - home work. Wee need to explain the sources of restrictions and what is "obligation", "permission", "restrictive permission". TODO: prepare an extract from a consent form "I agree that my data will be used in scientific EU projects studying leukemia" and from agreement "acknowledge funder or data provider, 5 years after project finish".
Give some use cases: we have this and that do we comply with GDPR or not? - not, because this and that is missed.