GDPR - General Data Protection Regulation

Introduction to GDPR

• Data breach accidents and scandals

• The history of GDPR

• What is the General Data Protection Regulation?

• Privacy

• Data Protection

• Territorial scope of GDPR

• What is not covered by GDPR

• An overview of the 11 chapters

• The impact of GDPR on business is explored in data protection compliance training

• The impact on the various departments of your company (Finance, HR, Marketing & Sales, Compliance, etc.)

International Transfer of Personal Data

• The general rule

• Adequacy decision

• Appropriate safeguards

• Derogation

Data Protection Law, Legal Basis and Other GDPR Principles

• Lawfulness, Fairness and Transparency of the Processing of Personal Data

• Legal basis for data processing

• Consent

• Contractual need

• Compliance with legal obligation

• Protection of vital interest

• Legitimate interest

• Public Interest

• This GDPR training course assesses special categories of personal data

• Legal basis for the processing of special categories

• Purpose limitation, Minimisation, and Accuracy

• Storage time limitation, Integrity and Confidentiality, and Accountability

Data Subjects’ Rights

• Transparency

• Being informed

• Access to personal data

• Correction of the data

• Right to be forgotten

• Data portability

• Object

• Compelling legitimate grounds

Controllers’ and Processors’ Obligations

• Controllers and Joint Controllers

• Processors

• Data Protection by Design

• Data Protection by Default

Security of Personal Data

• Appropriate technical and organisational measures

• Anonymisation, Pseudonymisation, Encryption

• Assurance of confidentiality and integrity

• Ability to restore access

• Effectiveness of the measures

DPIA Training: Data Protection Impact Assessment

• What is a DPIA?

• The circumstances under which you conduct a DPIA

• The role of the DPO

• Mandatory elements of the DPIA

• Prior Consulting

Breach of GDPR

• Personal data breach

• Notification - timing

• Breach reporting GDPR (requirements)

• Penalties under GDPR

Training Objectives

This GDPR training course will cover:

• The main aspects of the General Data Protection Regulation and its impact on businesses

• The territorial scope of GDPR

• The requirements for the international transfer of Personal Data

• The legal basis required for Personal Data Processing

• Understanding data subjects’ rights

• The obligations of Data Controllers and Processors

• Information security requirements for Data Processing

• The requirements of Data Protection Impact Assessment (DPIA)

• The role of the Data Privacy Officer

• Learn about the notification and consequences of GDPR breaches

Training Course Summary

Redcliffe's GDPR training course covers key elements of the General Data Protection Regulation.

Starting with an overview of GDPR, we explore background data breaches and scandals, the rights it protects, its extraterritorial reach, and its impact on businesses and company departments.

You will then go on to master GDPR rules on the international transfer of personal data. Thereafter, we will cover the legal basis for data processing and go through all Data Subjects’ rights.

Sessions also cover Controllers' and Processors’ obligations and personal data security requirements under the GDPR.

Participants will take part in DPIA training and learn about the Data Protection Impact Assessment, as well as the consequences and measures in the event of a GDPR breach.

We use a variety of case studies and exercises, especially on the final afternoon, based on hypothetical and real-world cases (the latter based on publicly available information).