TRAINING EVENT: General Data Protection Regulation (GDPR) – The Basics

A comprehensive 2 hour evening seminar aimed at getting you equipped with the fundamentals of GDPR helping you and your business be compliant ahead of May 25th 2018. Start time – 18:00

This course will equip you with:

• An understanding of how GDPR will affect data processing outside the EU
• Recognition of how GDPR was developed by European Union policy makers
• Clarity on individual consent and information requirements when processing data in a marketing context
• An understanding of key definitions and scope, for example:
  • If and when GDPR can affect data processing outside of the European Union
  • The definition of personal data under new legislation
  • Consent and when it is necessary to obtain it
  • How these changes affect processing
• Contextual understanding of Data Processor’s liability
• Knowledge and understanding of individual rights, such as The Right to Erasure
• Practical understanding of how this will impact your database

GDPR, or a similar piece of legislation, will still be implemented by the UK Government post-Brexit. Therefore it is imperative that companies are prepared to be compliant when processing personal data within and outside of the European Union. Any company based in the UK that trades with the EU will be affected and need to comply to avoid hefty penalties and fines. The current guidance being issued by the Information Commissioner’s Office and the Digital Marketing Association is that Brexit should not impede the implementation of GDPR.

In order to help companies prepare for this, this course has been developed alongside the Digital Marketing Association and GDPR External Working party by the Institute of Digital Marketing.

Key areas covered by this course include:

The importance of Data Protection to Marketers

• Why was the regulation necessary?
• What is the scope of GDPR?
• How will it be enforced and what penalties are associated with GDPR?

What’s changed under GDPR?

• The Data Protection Act 1998 vs. GDPR
• An Overview of Data Protection
• An Overview of GDPR

Data

• How to define Personal Data and a Data Subject
• Various and special categories of data

Obtaining consent

• How Consent is defined
• How to obtain consent under new legislation

Legitimate interests

• How Legitimate Interests are defined
• The conditions around Legitimate Interests

Profiling

• How Profiling is defined under GDPR
• The legal implications of Profiling
• Legislation for direct marketing Profiling

Objections to profiling

• Communicating the right to object to data subjects

Essential information you must provide to data subjects

• Icons

The rights of individual data subjects

• Specific rights of individuals under GDPR
• The Right to Erasure
• Data portability and retention of data for suppression

Records of processing and database implications

• The level of proof required for legitimate consent

Data processors

• The obligations of Data Processors for compliance

Data breach

• The obligations around notifying of data breaches

The accountability of Data Protection Officers

• Overview of accountability
• How to appoint a Data Protection Officer
• General Data Security

GDPR on an international scal

• How to transfer Personal Data overseas
• Remaining accountable on cross-border campaigns

Looking ahead

• How your company can prepare for GDPR