1
Introduction to the General Data Protection Regulation (GDPR)
- Legal fundamentals.
- History from the French “Loi Informatique et Libertés” to the General Data Protection Regulation (GDPR).
- Overview of the General Data Protection Regulation.
- Personal data protection challenges.
- Responsibility of the legal entity.
Exercise
Analyzing non-compliance risks.
2
Fundamentals of personal data protection
- Essential notions.
- The scope of the General Data Protection Regulation.
- The powers of the supervisory authorities.
- The fundamental principles.
- The appointment of a Data Protection Officer (DPO).
Exercise
Defining the skills of the Data Protection Officer (DPO).
3
The obligations of the General Data Protection Regulation (GDPR)
- Appointing a Data Protection Officer (DPO).
- The role of the Data Protection Officer.
- Ensuring the lawfulness of the processing.
- Informing the data subjects.
- Awareness-raising and training.
Exercise
Setting up a personal data processing record.
4
Analyzing the impact of the processing and consulting the authority
- Standard security and safety within an organization.
- Conducting a DPIA (Data Protection Impact Assessment).
- Maintaining a record of processing activities.
- Ensuring data security.
- Managing the rights of data subjects.
- Preparing for an audit.
Hands-on work
Conducting a Data Protection Impact Assessment (DPIA).
5
Toolbox
- Integrating security into projects.
- Code of conduct.
- Certifications and labels.
- Creating and managing an action plan.
- Ensure monitoring.