Get in Touch
 Duration 7 hours

Course Outline

Introduction to GDPR

  • Distinguishing between personal data and sensitive data
  • Selecting your compliance team
  • Interpreting GDPR terminology
  • Implementing privacy by design and privacy by default

Establishing a dedicated team

  • Selecting personnel to support GDPR efforts (legal, marketing, IT, HR)
  • Defining the role of a DPO and assessing the need for one

Authorization and Access

  • Identifying what constitutes personal data
  • Managing who can access specific data
  • Defining how and where data is stored, whether electronically or on paper
  • Implementing data security measures

Legal Rights and Responsibilities

  • Data Subjects and their associated rights
  • Obligations of the data Controller
  • Obligations of the data Processor
  • Managing data subject requests
  • Handling international data transfers
  • Identifying data breaches
  • Understanding fines and potential penalties
  • Managing third-party services
  • Compliance with international data transfer regulations

Formulating Policies and Procedures (Legal Considerations)

  • Drafting a data privacy policy for staff and clients
  • Documenting the legal basis for retaining data
  • Setting codes of conduct for data collection and handling
  • Reviewing external third-party contracts with suppliers

Ongoing Maintenance

  • Keeping data current – ensuring the data you hold remains accurate
  • Revising privacy notices and procedures in line with GDPR updates
  • Amending contracts as necessary

Requirements

Participants do not need to meet any specific prerequisites to enroll in this course.

Number of participants


Price per participant

Testimonials (3)

Upcoming Courses

Related Categories