The course aims to raise awareness and understanding of privacy and data protection responsibilities within your role and how to help your organisation comply with the requirements of the GDPR. Attendees will learn what is required for their organisations to comply with the regulation and how the principles should be applied within their organisation. Ideally you should have attended Part 1, or watched the payback online before joining Part 2.

Part 2: (28th September)

1. Privacy Notice

2. Subject Access Request (SAR)

3. Data Protection Impact Assessment (DPIA)

4. Incident Response & Data Breach Management

5. Demonstrating Compliance

6. Conclusion

7. Key Takeaways

8. Useful Resources

9. Q&A

Learning Outcomes

By the end of the course, attendees will have a basic understanding of the following:

• Data Protection Law – UK GDPR

• Personal Data

• Data Protection Principles

• Privacy Policies/Notices

• Your Data Protection Rights

• Lawful basis for processing

• Data retention

• Information Asset Register

• Records of Processing Activities

• Managing data breaches

• Handling Subject Access Requests

• How to protect personal data within your role

• Key roles – Data Controller versus Data Processor, Data Protection Officer, Supervisory Authority

Short Bio:

John Adegoke, CIPP/EData Protection and Privacy Specialist.

Accomplished professional with hands on experience and expertise in developing, implementing and managing data protection, information governance and privacy programmes, assuring compliance; an advocate for security and privacy by design principles. A fully qualified and Certified Information Privacy Professional specialising in the EU/UK General Data Protection Regulations. Extensive experience spanning over 20 years working in the Private, Charity and Social Enterprise Sectors.

Contact alexcharles@vac.org.uk for more information.