Programme

PART I  - JUMP START: Privacy Fundamentals

Monday

• GDPR - From data management to responsible use of date
• Key data protection concepts, principles and obligations
• Grounds for processing, including legitimate interest and consent
• Processing sensitive personal data
• The rights of data subjects and how to handle them

PART II – Setting up and implementing a GDPR compliance framework in practice

Tuesday: Essential GDPR principles and requirements

• Actors, roles and responsibilities: Controller and processor
• The role of the DPO and the interaction with the rest of the organisation
• Supervisory authority and cooperation with the DPAs
• Data Protection Impact Assessment
• Data protection by design and default

Wednesday: Data Transfers

• Data transfers vis-a-vis other rules
• Data transfers regulatory framework
• Transfer personal data safely
• International agreements
• Adequacy decisions
• Standard Contractual Clauses
• Appropriate safeguards
• Derogations and exceptions, including data subject consent

Thursday: Getting technical

• Data security management under the GDPR
• Security incidents
• Technical and organisational measures
• Data privacy breach management, notifications and communication
• Data breach management in practice

Friday: Demonstrating compliance

• European Case Law on Privacy and Data Protection
• Setting up policies and procedures
• Re-cap of the week
• Q&A