General Data Protection Regulations (2018) - A General Introduction
Course Objectives
This programme is designed to ensure that delegates leave the event with a working understanding of the new European General Data Protection Regulations 2018 (GDPR) which will fully replace the 1998 UK Data Protection Act in May 2018. The new GDPR places a much greater emphasis on individual compliance and organisational governance; introduces new standards and sanctions; and focuses on addressing the growing trend towards electronic processing and the requirement for transportability of personal data.
Although the act emanates from the European Parliament, the UK Information Commissioner has clearly stated that decisions made in relation to Britain's exit from Europe (Brexit) will not impact the full implementation of the regulations.
Contents
- Overview of the new GDP Regulations and their impact on participants
- The role of the Information Commissioner and associated powers
- Answering the questions: What is personal data?; What part do I play in the process?; What role does the Data Controller or Data Protection Officer fulfil?
- What are my rights as a data subject?
- What has changed and how do the changes impact upon me?
- What is processing and what is unlawful processing?
- Dealing effectively with subject access and third party requests and complaints
- The processes and procedures that will help manage and mitigate risks
- Highlighting the penalties for breaching the new Regulations
Who should attend
Anyone whose role or function brings them into contact with or who processes personal data of any kind. This is essential compliance training and is equally suitable for those in personnel departments as well as supervisors and managers who conduct recruitment interviews or personal development plan (PDP) type interviews. Financial organisations, the education and health sectors, central and local government, charitable and not for profit organisations, children’s and youth activities and faith based organisations.
Course benefits
The programme will be engaging, interactive and will include targeted case studies to ensure that its objectives are fully met. As much time as is necessary will be allowed at the end of the session for questions and subject clarification.
Additional information
An important outcome of the programme is that the knowledge gained by participants can be applied to protecting their personal and family data held by non-work related organisations.
Certificates
All delegates who successfully complete the programme will receive a Certificate of Attendance.
Trainers background
The programme facilitator has many years of experience in developing policies, processes and protocols that ease compliance and accountability. He has delivered the full spectrum of access to information related training and consultancy of GDPR is a fundamental element. His understanding of the mutually supporting domains of records management, information security compliance, the FoI Act and Environmental Information Regulations ensures that there is a full understanding of the context of the Regulations.