Course Description (from the course website)
The 2-day General Data Protection Regulation (GDPR) Practitioner course enables delegates to fulfil the role of DPO under the EU GDPR, and covers the Regulation in depth. This includes implementation requirements and the necessary policies and processes, in addition to acquiring knowledge concerning important elements of effective data security management. This GDPR Practitioner course covers the following topics:
-
- Demonstrating compliance with the GDPR
- Planning for compliance – privacy compliance frameworks and gap analysis
- Legal requirements of the GDPR
- Lawful Processing – rights and consent
- Data Processing for Marketing purposes
- Subject Access Requests
- Common data security failures, consequences, and lessons to be learnt
- Privacy principles in the GDPR
- Data Protection Impact Assessments
- Personal Information Management Systems (PIMS)
- Data Breach reporting requirements
- Dealing with third parties and data in the Cloud
- International transfers & the EU-US Privacy Shield
- Practical Implications of GDPR
- Notification Obligations
- Protecting personally identifiable information
- Penalties for non-compliance
- The rights of data subjects
- Data controllers and processors – roles and responsibilities
