Course Outline
Overview of the General Data Protection Regulation (GDPR)
- Defining personal and sensitive data categories
- Constituting a compliance team
- Interpreting key GDPR terminology
- Implementing privacy by design and default principles
Team Assembly
- Selecting cross-functional personnel (legal, marketing, IT, human resources) to support GDPR compliance
- Determining the necessity of appointing a Data Protection Officer (DPO)
Access and Permissions
- Classifying data as personal or non-personal
- Establishing access controls for authorized personnel
- Documenting storage methods, including electronic and physical formats
- Implementing robust data security measures
Rights and Obligations
- Data subject rights
- Obligations of the data controller
- Obligations of the data processor
- Managing data subject requests
- Regulations regarding international data transfers
- Definitions and reporting requirements for data breaches
- Financial penalties and enforcement actions
- Management of third-party service providers
- Regulatory frameworks for cross-border data flows
Policy and Procedure Development (Legal Considerations)
- Drafting comprehensive data privacy policies for employees and clients, including those applicable for government contexts
- Documenting the legal basis for data processing activities
- Establishing codes of conduct for data collection and handling
- Reviewing third-party contracts and supplier agreements
Ongoing Maintenance
- Ensuring the accuracy and currency of held data records
- Updating privacy notices and operational procedures in response to regulatory changes
- Amending contractual agreements as necessary to maintain compliance
Requirements
No prior prerequisites are required for participation in this program, ensuring broad accessibility for government audiences.
Testimonials (3)
The variety of the information shared and the clarity to explain terms in plain English.
Arisbe Mendoza - Fairtrade International
Course - GDPR Workshop
The training was very informative and relevant to the realities of what we are dealing with. It was very eye-opening to understand how to deal with data of UE residents. The trainer was very informed and prepared on the subject.
Isaac Rewa - Fairtrade International
Course - GDPR Workshop
I generally enjoyed the knowledge of the trainer.