Data Literacy, Governance & Ethics: GDPR, PII and Avoiding Bias

Cornerstone guide

Data Literacy, Governance & Ethics: GDPR, PII and Avoiding Bias

2 min readPublished 29 Jul 2026

Working with data is a position of trust. Employers increasingly screen for data ethics and governance — knowing how to use data responsibly and lawfully is now a core professional skill, not an afterthought.

Data literacy

Data literacy is the ability to read, understand, question and communicate with data. It means knowing what a metric really measures, spotting when a chart misleads, and asking "where did this come from and can we trust it?" It's the skill that turns numbers into good decisions.

Personal data and GDPR

Much business data is about people. Under GDPR (and similar laws), personal data (PII) — anything that can identify someone — must be handled lawfully:

  • Lawful basis — you need a valid reason to process it (consent, contract, legitimate interest…).
  • Purpose limitation & minimisation — collect only what you need, for a stated purpose.
  • Storage limitation — don't keep it longer than necessary.
  • Security — protect it (access controls, encryption).
  • Individual rights — people can access or request deletion of their data. Analysts should anonymise or pseudonymise personal data wherever possible.

Data governance

Governance is the framework of policies, ownership and standards that keeps data accurate, secure and used properly — data owners, access controls, definitions ("what counts as an active customer?") and audit trails. Consistent definitions prevent the classic "your number doesn't match mine" argument.

Avoiding bias and misleading analysis

Ethical analysis means not fooling yourself or others:

  • Sampling bias — is your data representative, or skewed?
  • Confirmation bias — don't cherry-pick data that fits the answer you wanted.
  • Misleading visuals — truncated axes, cherry-picked timeframes and dodgy scales distort the truth.
  • Correlation ≠ causation — two things moving together doesn't mean one causes the other. Present data honestly, including uncertainty and caveats.

Put it to work

For a dataset you use, identify any personal data and how it should be protected, and check one chart you've seen recently for a misleading axis or timeframe.

Interview Intelligence

How this topic actually shows up in interviews — and how to demonstrate you understand it.

Why employers ask about this

Data roles handle sensitive information, so employers test your awareness of GDPR, governance and ethical analysis.

Technical questions
How do you handle personal data in an analysis?+

Apply a lawful basis, minimise and anonymise/pseudonymise where possible, restrict access and never keep it longer than needed.

How do you avoid producing misleading analysis?+

Check for sampling/confirmation bias, use honest visuals (full axes, fair timeframes) and distinguish correlation from causation.

Behavioural questions
Tell me about a time you had to handle sensitive data carefully.+

Use STAR: how you identified the personal data, applied governance/security, minimised exposure and stayed compliant.

Real-world scenarios
“A manager asks you to build a report that includes customers' full personal details for convenience.”+

Expected answer: Challenge it: apply data minimisation, use only what's needed, anonymise where possible and restrict access per GDPR.

Employability Intelligence

Where this knowledge takes you — the jobs, skills and certifications it feeds into.

Relevant roles
Data AnalystBI AnalystInsights Analyst
Skills you're proving
Data literacyGDPR / PIIGovernanceBias awareness
Recommended certifications
Microsoft Power BI (PL-300)Google Data Analytics
Career progression

Underpins trust and progression across every data career.

What employers expect

That you can clean, analyse and visualise real data, write SQL, and turn findings into clear, actionable recommendations for the business.

Frequently asked questions

What is PII?

Personally Identifiable Information — any data that can identify an individual. It must be handled lawfully under GDPR and protected.

What is data governance?

The framework of ownership, policies, definitions and controls that keeps data accurate, secure and used consistently across an organisation.

Why does 'correlation is not causation' matter?

Two variables moving together doesn't mean one causes the other — assuming so leads to wrong, sometimes costly, decisions.

Related guides

Practise what you've learned

Turn this guide into real, evidenced progress

Missiora helps you measure, improve and evidence the capabilities employers actually value — start with the tools best suited to this topic.

M
Published by
Missiora

Missiora is an AI Employability Intelligence platform. Our resources are researched and reviewed by the Missiora team to help you measure, improve and prove your career readiness.