GDPR Workshop Training Course

Introduction to the GDPR

• Distinguishing between personal data and sensitive data
• Identifying and assembling the right team
• Key GDPR terminology
• The concepts of privacy by design and privacy by default

Establishing a Governance Team

• Identifying key personnel from legal, marketing, IT, and HR to support GDPR initiatives
• Defining the role of a Data Protection Officer (DPO) and assessing the need for one

Permissions and Access

• Identifying what constitutes personal data
• Defining who has access to the data
• Determining storage methods and locations, whether electronic or paper-based
• Implementing data security measures

Rights and Responsibilities

• Understanding Data Subjects and their associated rights
• Obligations of the Data Controller
• Obligations of the Data Processor
• Managing data subject access requests
• Navigating international data transfers
• Defining data breaches
• Compliance fines and penalties
• Managing third-party service providers
• Regulations on international data transfers

Developing Policies and Procedures (Legal Considerations)

• Drafting data privacy policies for both employees and clients
• Documenting the legal basis for data collection and retention
• Setting codes of conduct for data collection and handling
• Reviewing third-party contracts with suppliers

Ongoing Maintenance

• Ensuring data accuracy and updating records as necessary
• Revising privacy notices and procedures to reflect evolving GDPR requirements
• Updating contractual agreements as needed.