Get in Touch
 Duration 7 hours

Course Outline

Introduction to GDPR

  • Distinguishing between personal data and sensitive data
  • Assembling your team
  • Clarifying key GDPR terminology
  • Implementing privacy by design and privacy by default

Building a GDPR Team

  • Selecting key personnel for GDPR support (legal, marketing, IT, HR)
  • Understanding the Data Protection Officer (DPO) role and determining if one is required

Data Permissions and Access

  • Identifying what constitutes personal data
  • Defining who has access rights to data
  • Determining data storage methods and locations (electronic or paper-based)
  • Implementing data security measures

Legal Rights and Obligations

  • Data subjects and their statutory rights
  • Obligations of the data controller
  • Obligations of the data processor
  • Managing data subject requests
  • Handling international data transfers
  • Defining data breaches
  • Understanding potential fines and penalties
  • Engaging third-party services
  • Regulations regarding international data transfers

Formulating Policies and Procedures (Legal Compliance)

  • Drafting data privacy policies for employees and clients
  • Documenting the legal basis for data retention
  • Establishing codes of conduct for data collection and handling
  • Reviewing third-party contracts with suppliers

Continuous Maintenance

  • Ensuring the accuracy and currency of held data
  • Updating privacy notices and procedures in response to GDPR changes
  • Revising contracts as necessary

Requirements

No prior prerequisites or specific requirements are necessary to participate in this course.

Testimonials (3)

Related Categories