International TV production company ensures they comply with GDPR

A global TV production company has requested a GDPR (general data protection regulation) training course to be delivered to educate the employees in the articles and impacts.

GDPR is the evolution to the archaic 1998 data protection act that was no longer suitable to the modern world data explosion, where data is both supplied by the consumer and collected via other means by companies. GDPR has seven defining principles; lawfulness, fairness and transparency, accuracy, security, purpose limitation, storage limitation, data minimisation and accountability, which are all intended to determine how people’s data can be handled. GDPR affects different areas for the production company depending on the type of show they will be filming. For example in game shows, the company must be aware of what type of information they release regarding the contestants or if an audience is present then the correct guidelines must be followed regarding the filming of them as image is considered personal data. Moreover, the production company must hold lots of very personal data like bank details, home addresses, etc. for cast members and must act correctly to comply with regulations. Furthermore, a training course on GDPR is especially important in the marketing of the programmes. Post-GDPR, the companies must comply with more stringent rules regarding tracking of traffic on websites and through online video platforms that stream the content.

In consultation with JBI, a tailored half day GDPR training course was provided to spotlight the articles that are most important for the production company to understand and comply with, as well as a more general overview of other parts of the regulations. The highlights of the course were created in cooperation with the instructor:

• EU GDPR history, background and terminology.
• Data Protection Act vs EU GDPR.
• Controllers and Processors
• Data protection by design and by default
• Security of processing
• Data subjects and their rights.
• Dealing with subject access requests.
• Marketing requirements.
• The implementation path to EU GDPR compliance:
• International data transfers.
• Replacing Safe Harbour – the new requirements

7 delegates from the production company joined the training course from various sectors of the business such as developers and analysts. The course took place remotely in their head office but has regularly taken place via zoom throughout the pandemic. The feedback received following the course was very complimentary:

“Engaging and good content. I liked the examples given to explain the different articles and I liked the context given to what is considered a dry subject to most technical professionals, and very impressed with the knowledge of the trainer.” JD, Senior Analyst

“It was quite interesting and now has given us a tool to get to the right information if and when need be. I know a lot more about GDPR now and have resources to find out much more.” JP, IT manager

For further information on training courses, please see below:
GDPR training course

Cyber security training courses 

Here are some other articles pertinent to this one:

Threat modelling skills improve Cyber Security at Government Agency

GDPR Implications for Software & IT Professionals