GDPR: Data handling and sharing training session

Overview of Session

The GDPR expects organisations to keep their teams up to date with best practice for compliance with the regulations. Keeping the GDPR front of mind is essential and made even more relevant as changes take place to ways of working, communication and technology.

This session is ideal as a ‘refresher’ or part of annual training for people who already have a baseline knowledge of the GDPR. It explains the practical implications of processing personal data as part of your everyday role, and understanding the risks with handling and storing personal data.

Throughout the 2hr training course, delegates are asked a few questions to ensure that the course material is understood. The course is facilitated by Kellie Peters, co-founder of Databasix UK Ltd.

Learning Outcomes:

• An explanation of what is personal data and special categories of personal data that voluntary sectors organisations typically.

• An Introduction to the principles of the GDPR, providing relevant examples

• An explanation of how voluntary sector organisations can demonstrate that they are being fair, lawful and transparent with the personal data they are processing.

• An explanation of what needs to be considered when the person whose data you want to collect needs to give their consent (e.g. newsletters vs. donations/fundraising campaigns).

• An explanation of when a voluntary sector organisation can rely upon legitimate interests for processing personal data.

• How to understand and respect the rights of the person whose data you are collecting, in particular how to respond to requests

• Access to personal data

• What operational and technical security measures you need to follow when processing personal data, including working remotely.

• How to keep personal data safe and secure, including good password management, identifying phishing scams, how to delete/shred data.

• The importance of data protection impact assessments when introducing a new system into the organisation.

• How and when to report a personal data breach.

Who should attend

Anyone who works or volunteers in a charity or community group who processes (i.e. handles) the personal data of others. You might be a volunteer, staff member or trustee.

Cost

RVA has partnered with Databasix to offer a subsidised training offer to those working or volunteering for charities and community groups in Reading. The session is £18.00 per person. This offer is restricted to groups in Reading. If you do not offer services in Reading, please check with us before booking.

Further support from RVA

o For any queries about this training, please contact RVA's Advice Worker, Asha Mehboob: asha.mehboob@rva.org.uk

o RVA free Advice Service for 1:1 confidential advice on legal and governance matters, including advice on trustee roles and responsibilities. Please email advice@rva.org.uk or telephone us on 0118 937 2273.

o RVA Knowledge Base, which has a wealth of resources on trusteeship and governance that you can browse at your convenience.