GDPR training course

Foundation (1 day)

• EU GDPR history, background and terminology.
• Data Protection Act vs EU GDPR.
• Controllers and Processors
• Data protection by design and by default
• Security of processing
• Data subjects and their rights.
• Dealing with subject access requests.
• Marketing requirements.
• The implementation path to EU GDPR compliance:
• International data transfers.
• Replacing Safe Harbour – the new requirements.

Practitioner (3 days)

• Data subjects and their rights
• Setting up a privacy compliance framework
• The role of the DPO common data security failures, consequences and lessons to be learnt
• GDPR privacy principles
• Data Privacy Impact Assessments (PIAs)
• Developing a risk management framework
• Data mapping
• The rights of data subjects
• Consent rules
• Subject access requests
• The roles of and relationships between controllers and processors
• Dealing with third parties and data in the cloud
• Demonstrating compliance with the GDPR
• Data breach reporting requirements
• Range of enforcements, regulatory and compensatory aspects of the GDPR