Get in Touch
 Duration 7 hours

Course Outline

Introduction to GDPR

  • Distinguishing between personal data and sensitive data
  • Assembling your team
  • Key GDPR terminology explained
  • Applying privacy by design and privacy by default

Forming a dedicated team

  • Selecting key personnel from legal, marketing, IT, and HR departments
  • Understanding the role of a DPO and determining if one is necessary

Access control and permissions

  • Identifying what constitutes personal data
  • Defining who has access to specific data
  • Determining storage methods and locations, whether electronic or paper-based
  • Implementing data security measures

Legal rights and responsibilities

  • Understanding Data Subjects and their entitlements
  • Obligations of the Controller
  • Obligations of the Processor
  • Responding to data access requests
  • Managing cross-border data transfers
  • Defining a data breach
  • Consequences, fines, and penalties
  • Managing third-party service providers
  • Regulations regarding international data transfers

Establishing policies and procedures (Legal aspects)

  • Formulating data privacy policies for employees and customers
  • Documenting the legal basis for data retention
  • Setting codes of conduct for data collection and processing
  • Reviewing external third-party agreements with suppliers

Ongoing maintenance

  • Data accuracy – ensuring all held data is current
  • Revising privacy notices and procedures to align with GDPR updates
  • Updating contractual agreements as necessary

Requirements

Participation in this course does not require any specific prior qualifications.

Number of participants


Price per participant

Testimonials (3)

Upcoming Courses

Related Categories