General Data Protection Regulations (GDPR)

The General Data Protection Regulations regulate how personal data is handled by organisations and gives individuals new rights including the right to access any personal information held about them. Every organisation in the UK who processes personal data must comply with the regulations. The Information Commissioner is now levying fines on organisations who have failed to comply and recent high profile cases are highlighting bad practice in this area. Good practice for companies is for the training of all who handle personal data, either as controller for the company or for those gathering or processing personal information.

The training will cover the following areas:

• The Six GDPR Principles – what has changed from the Data Protection Act 1998; personal data, fair processing notices, transferring data and handling requests
• Subject Access Explained – what to release, unreasonable requests, exceptions

• Data Security – your responsibilities and employee responsibilities
• Penalties – role of the Information Commissioner, powers of the Information Commissioner and employee data
• Interface with other Legislation – Freedom of Information Act, Regulation of Investigatory Powers Act and Human Rights

Please note we can also come on customer premises to do a bespoke course for you as a group at a date of your convenience. Call us for availability.