GDPR Workshop Training Course

Introduction to the GDPR

• Defining personal and sensitive data
• Assembling your team
• Key GDPR terminology
• Implementing privacy by design and privacy by default

Team Appointments

• Selecting team members to support GDPR initiatives (including legal, marketing, IT, and HR)
• Understanding the role of the Data Protection Officer (DPO) and determining if your organization requires one

Permissions and Access Control

• Identifying whether data qualifies as personal data
• Defining who is authorized to access data
• Managing storage methods, such as electronic or paper-based systems
• Ensuring data security

Rights and Obligations

• Data subject rights and entitlements
• Obligations of the data controller
• Obligations of the data processor
• Managing data subject requests
• Conducting international data transfers
• Defining what constitutes a data breach
• Understanding fines and penalties
• Managing third-party services
• Conducting international data transfers

Developing Policies and Procedures (Legal Considerations)

• Drafting data privacy policies for employees and clients
• Documenting the legal basis for data retention
• Establishing codes of conduct for data collection and handling
• Reviewing external third-party contracts with other suppliers

Ongoing Maintenance

• Regularly updating data to ensure accuracy
• Adapting privacy notices and procedures in response to GDPR changes
• Updating contracts as necessary