General Data Protection Regulation (GDPR)
-
30 Minutes -
For all staff
-
EU
Data protection governs how organisations collect, use and store personal and sensitive data. This 30-minute course helps staff know which types of data are protected under the GDPR, explain the rights the Regulation grants to individuals, and take the right steps when a subject access request arrives, including recognising the deadlines and the limits of what must be provided.
Subject access requests arrive without warning, often from employees or customers in dispute, and the one-month clock starts on receipt by anyone. Mishandled requests attract complaints to a supervisory authority quickly. Training the whole workforce rather than the data protection team alone means requests get recognised and routed on the day they arrive, which is where most of the risk sits.
-ID.webp?width=800&name=276393188548_193493508_General%20Data%20Protection%20Regulation%20(GDPR)-ID.webp)
What you’ll learn in
this course
- Know what types of data are protected under the GDPR
- Explain all the rights granted to individuals under the GDPR
- Take steps to deal with subject access requests
- Recognise the six principles of data protection
- Explain our lawful bases (consent, legitimate interest etc) for processing personal data
- Take appropriate action to safeguard personal data
- Spot and report any personal data breaches
- Take an active role in supporting our GDPR compliance