GDPR Workshop Training Course

Introduction to GDPR

• Defining personal and sensitive data
• Selecting the appropriate team members
• Interpreting key GDPR terminology
• Implementing privacy by design and privacy by default

Building the Team

• Selecting contributors from legal, marketing, IT, and HR departments
• The role of a DPO and determining if one is required

Permissions and Access

• Identifying whether information qualifies as personal data
• Determining access rights
• Managing storage methods (electronic or paper-based)
• Data security measures

Rights and Responsibilities

• Understanding data subjects and their entitlements
• Obligations of the data controller
• Obligations of the data processor
• Responding to data access requests
• Managing international data transfers
• Identifying data breaches
• Consequences: Fines and penalties
• Third-party service considerations
• International data transfer protocols

Policy and Procedure Development (Legal Aspects)

• Drafting data privacy policies for staff and clients
• Documenting the legal basis for data retention
• Establishing codes of conduct for data collection and processing
• Reviewing third-party supplier contracts

Ongoing Maintenance

• Data accuracy: Ensuring held data remains current
• Updating privacy notices and procedures in response to regulatory changes
• Revising contracts as necessary