Get in Touch
 Duration 7 hours

Course Outline

Introduction to GDPR

  • Distinguishing between personal data and sensitive data
  • Forming your internal team
  • Interpreting key GDPR terminology
  • Implementing privacy by design and default

Establishing a Team

  • Selecting key personnel from legal, marketing, IT, and HR departments to support GDPR efforts
  • Defining the role of a DPO and assessing the necessity of appointing one

Permissions and Access

  • Identifying whether information qualifies as personal data
  • Defining who is authorized to access specific data
  • Managing data storage methods, whether electronic or paper-based
  • Implementing data security measures

Rights and Responsibilities

  • Understanding the rights of Data Subjects
  • Complying with Controller obligations
  • Fulfilling Processor obligations
  • Managing incoming data requests
  • Handling international data transfers
  • Defining and recognizing a data breach
  • Awareness of potential fines and penalties
  • Managing third-party service providers
  • Regulations regarding international data flows

Policy Development and Legal Procedures

  • Drafting data privacy policies for staff and clients
  • Documenting the legal basis for data retention
  • Establishing codes of conduct for data collection and management
  • Reviewing external third-party contracts with suppliers

Ongoing Maintenance

  • Ensuring the accuracy and currency of held data
  • Updating privacy notices and procedures to reflect evolving GDPR standards
  • Revising contracts as necessary.

Requirements

No prior specific prerequisites are required to participate in this session.

Number of participants


Price per participant

Testimonials (3)

Upcoming Courses

Related Categories