APMG GDPR Awareness

After completion of this course, candidates should be able to:

• Explain the reasons for the new regulation and the scope of its application
• Identify the key participants in processing of personal data and discuss their responsibilities
• Discuss the key principles and conditions that determine the lawful basis for processing
• Outline the key regulatory aspects impacting organizations and the risks and opportunities arising
• Identify the next steps for achieving compliance and building a privacy awareness culture

The course and certification are designed for any individuals from small, medium or large organizations who wish to make data privacy matter. In particular, for organizations who want to:

• Promote better use of personal data in compliance with GDPR
• Launch their own data privacy awareness campaigns
• Gain a basic understanding of the GDPR before planning their own compliance programmes
• The course has been designed to address all audiences and prepare them for their next steps.

Background to the introduction of GDPR

How GDPR has clarified the definitions of personal data

• Key concepts, roles and principles (Part 1)
  • Different data items and how they are treated
  • What is personal data processing
  • Key roles in data protection
  • Six data protection principles
• Key concepts, roles and principles (Part 2)
  • Changes in data subject rights
  • Privacy notices and subject access requests
  • Key changes impacting consent mechanisms
• Consent and data subject rights
  • Rights for individuals
• Accountability and governance
  • Data privacy impact assessments
  • The DPO
  • Concepts of privacy
  • Maintaining appropriate documentation
  • Code of conducts and certification
  • Responsibilities of the DPO
• Other key aspects of GDPR
  • Data breach
  • Security of personal data
  • International data transfers
  • What triggers a breach
  • Risk based approach

No prerequisites.

Classroom course duration: 1 day