Get in Touch
 Duration 7 hours

Course Outline

Introduction to GDPR

  • Distinguishing between personal data and sensitive data
  • Assembling your compliance team
  • Interpreting key GDPR terminology
  • Implementing privacy by design and privacy by default

Establishing a Governance Team

  • Identifying key stakeholders across Legal, Marketing, IT, and HR
  • Defining the role of a DPO and assessing the need for one

Access and Permissions

  • Identifying what constitutes personal data
  • Defining access controls for who can view data
  • Managing data storage methods, whether electronic or paper-based
  • Implementing data security measures

Legal Rights and Responsibilities

  • Understanding Data Subject rights
  • Complying with Controller obligations
  • Adhering to Processor obligations
  • Managing data subject access requests
  • Navigating international data transfers
  • Identifying data breaches
  • Understanding potential fines and penalties
  • Managing third-party service relationships
  • Regulations governing cross-border data flows

Formulating Policies and Procedures

  • Drafting data privacy policies for employees and clients
  • Documenting the legal basis for data retention
  • Setting codes of conduct for data collection and handling
  • Reviewing third-party supplier contracts for compliance

Ongoing Maintenance and Updates

  • Ensuring the accuracy and currency of held data
  • Updating privacy notices and procedures in response to GDPR changes
  • Revising contracts as necessary

Requirements

No prior experience or specific prerequisites are necessary for participation in this course.

Number of participants


Price per participant

Testimonials (3)

Upcoming Courses

Related Categories