GDPR Workshop Training Course

Introduction to GDPR

• Distinguishing personal and sensitive data
• Assembling your compliance team
• Interpreting GDPR terminology
• Implementing privacy by design and privacy by default

Establishing the team

• Selecting personnel to assist with GDPR (legal, marketing, IT, HR)
• Defining the role of a DPO and determining necessity

Authorizations

• Identifying personal data instances
• Managing data access permissions
• Defining storage methods and locations (electronic or paper-based)
• Implementing data security measures

Entitlements and duties

• Understanding Data Subjects and their rights
• Controller responsibilities
• Processor responsibilities
• Managing data requests
• International data transfers
• Identifying data breaches
• Regulatory fines and penalties
• Managing third-party services
• Cross-border data transfers

Formulating policies and procedures (legal considerations)

• Drafting data privacy policies for staff and clients
• Documenting the legal basis for data retention
• Defining codes of conduct for data collection and handling
• Reviewing external third-party supplier contracts

Ongoing maintenance

• Ensuring the currency of held data
• Revising privacy notices and procedures in response to GDPR updates
• Amending contracts as necessary