“The access request from the banned member” is a data protection assistant job simulation on FinderK.
You work at Fernhill Gyms, an original fictional company, and complete 3 assignments in about 75 minutes.
It is for anyone who wants to practice data protection assistant work. No previous work experience is required.
Role
Data protection assistant
Industry
Data privacy
Level
Intermediate
Time
About 75 minutes, 3 assignments
Access
Included in Plus
Created by
FinderK
A member banned after a gym floor incident has asked for all the data held about her, including the names of who complained. Work out the real deadline, decide what is disclosed, redacted or withheld, write to her, and keep the record.
Read the full brief
You are the data protection assistant at a gym chain. A former member, banned after an argument over a squat rack, emailed her club asking for everything held about her. The email sat in the club for eleven days, a temporary colleague asked for ID she did not need to give, and the register now shows the wrong deadline. Sixteen records were found, including a complaint from a frightened member, a witness who asked not to be named, a manager's unflattering chat and legal advice. You decide what she gets, write to her under pressure, and record the decisions. Automated checks confirm your counts and saved work; your judgement is reviewed against the standard for the role.
What is Fernhill Gyms?
Fernhill Gyms is a fictional chain of fourteen gyms in the north of England with about 38,000 members. It holds member records, payments, bookings, door entry logs, body scans, incident reports and CCTV. The privacy team is a data protection officer, a data protection assistant and a records analyst. This case takes place in the week of Monday 12 October 2026. All times are UTC. The assistant decides routine disclosure and redaction; exemptions and extensions need the data protection officer.
Who do you play?
You are the data protection assistant in the Privacy team team.
You prepare responses to requests for personal data. You may decide routine disclosure and redaction under the procedure and instruct the redaction supplier within the standing order. Withholding a whole record under an exemption and any extension need Anouk Visser's approval; recommend them to her with reasons. You never confirm who a third party is.
These coworkers are fictional. They may make mistakes, so compare their suggestions with the evidence.
Frequently asked questions
How long does “The access request from the banned member” take?
About 75 minutes, across 3 assignments. When the time is up, you get 10 minutes to round up and submit. Pausing stops the clock.
Is “The access request from the banned member” free?
No. It is included in FinderK Plus. With a free account you can also do it without grading.
Do I need data protection assistant experience?
No. No previous work experience is required. The listed level is intermediate.
What do I get when I finish?
You get feedback on each assignment you submit. Completing all required assignments earns a completion certificate. It records participation and is not professional accreditation.
Is Fernhill Gyms a real company?
No. Fernhill Gyms is an original fictional company made for practice. Its coworkers may make mistakes, so check their suggestions against the evidence.
Security risk and compliance manager at Brackenfield Retail Group
About 80 minutes. Included in Plus.
Marketing wants a fast growing analytics vendor live before Black Friday, and it wants 1.2 million customers' names, emails and card digits. Assess the vendor's evidence, score the risk, design the controls that would make an exception acceptable, and keep the gate shut when the vendor reveals an old incident.
Skills: Assess vendor controls on evidence, not answers; Score third-party risk by a defined method; Design compensating controls that change the risk; Route a risk decision to the right approver; Hold a security gate under commercial pressure
A licensing partner wants its co-branded cereal bar pack approved before a printer's slot. The logo is too small, the partner's logo too big, the bar is short of fibre for its high fibre claim and short of granola for its made with claim. Review it, decide, and hold the claims when the launch date is used as pressure.
Skills: Review artwork against brand rules and a licence; Separate must fix items from advice; Check claims against evidence and a claims register; Give a partner clear, usable feedback under time pressure; Hold brand and legal standards against commercial pressure
Work out a food maker's electricity emissions for the annual report, both ways, with a site sold and a site bought during the year. Then stop marketing overclaiming renewable power, and restate the figure honestly when the certificates come in short.
Skills: Apply a reporting boundary to sites bought and sold; Calculate location-based and market-based Scope 2; Write a disclosure that claims only what the evidence supports; Restate a figure openly when evidence changes; Answer an assurance provider with evidence
A tired reporter has filed the council budget story six hours before deadline. Check every figure, decide what to do with a single anonymous allegation against a named councillor, get the right of reply right, and correct the record when a reader finds a flaw.
Skills: Fact-check figures and claims against original records; Present numbers correctly: percentages, points and like for like; Decide whether an anonymous allegation can be published; Give a named person a fair right of reply; Correct the record openly and precisely