Learning objectives
- Distinguish between non-personal, personal and special category ('sensitive') data
- Recognise how our Company complies with the General Data Protection Regulation (GDPR) and other data protection legislation
- Take appropriate action to safeguard personal and special category data
- Identify how and when to report breaches
Introduction
What is Data Protection?
- You decide: The importance of data protection
- You decide: Breaches of data protection law
- Crossing the line: Breaches of data protection law
- Who is involved in data protection?
- Personal data
- Special category ('sensitive') data
- You decide: Types of data
Data protection legislation
- The GDPR
- Rights of the data subject
- Scenarios: Rights of the data subject
The data protection principles
Principle: Lawfulness, fairness & transparency
- Lawful bases
- Lawful basis: Consent
- Scenario: Getting consent
- Scenario: A customer withdraws consent
- Scenario: Passing on contact details
- Lawful basis: Legitimate interests
- Legitimate interest assessments
- You decide: LIAs
- Documenting & reviewing LIAs
- Data protection impact assessments
Principle: Data limitation
- Scenario: An offer for a new service
- Scenario: Contacting customers' connections
Principle: Data minimisation
- Scenario: Information from job applicants
- Scenario: Information from customers
Principle: Accuracy
- You decide: Keeping data accurate & updated
Principle: Storage limitation
- Scenario: Retaining job applicants' details
- Scenario: Keeping details of former customers
Principle: Security, integrity & confidentiality
- International transfers of personal data
- Scenario: Gina's data transfer
- You decide: Are additional safeguards required?
Data subject access requests
- Dealing with DSARs
- You decide: Is it a valid DSAR?
Personal data breaches
- Scenarios: Personal data breaches
- Notification of breaches
- Scenario: Stolen data
Accountability & governance
- Records of processing activities
Penalties
- Crossing the line: Further breaches of data protection law
