Dates & venues:

Thursday 14 September 2017

9.30am to 12.15pm at Fife Voluntary Action, Cupar

2pm to 4.15pm at Fife Voluntary Action, Glenrothes

Monday 25 September 2017

9.30am to 12.15pm at Fife Voluntary Action, Kirkcaldy

Tuesday 10 October

2pm to 4.45pm at Gillespie Church, Dunfermline

Are you responsible for collecting and/or looking after personal data in smaller organisations such as community groups, clubs, charities or other third sector organisations in Fife? Would you like to know more about the basics of data protection, the principles and what it means for you both under the current Data Protection Act and future General Data Protection Regulations?

Description of Session:

On 25 May 2018 the General Data Protection Regulation (GDPR) will come into force, replacing the current Data Protection Act 1998 (DPA). This session - delivered by the Information Commissioner's Office whose role is to uphold information rights in the public interest - will provide an overview of the current DPA and outline how this will evolve into the enhanced data protection regime that all organisations will be required to adhere to from May 2018. It will also give attendees the opportunity to discuss questions they have about the use of personal information with the regulator and colleagues. Signposts will be given to relevant guidance and other supporting resources.

Prior to the sessions attendees might find the following tools from the ICO’s website useful:

Self Assessment Tool Kit - Use our checklists to assess your compliance with the Data Protection Act and find out what you need to do. The kit includes an assessment of an organisations readiness for GDPR.

Overview of the GDPR – a lengthy but in depth look at what we know so far about the new regulation. This is regularly updated.

12 Steps to Prepare for the GDPR – 12 steps organisations can take now to start preparing for the GDPR

Who should attend:

This session is for Third Sector organisations in Fife and is suitable for those who work with personal information on a regular basis. Some basic knowledge of data protection law and practice is preferable but not required.