| | | | |
 09:00 - 09:30 | Registration and refreshments |
| 09:30 - 09:35 | Welcome and introduction
Tim Musson, Managing Director , Computer Law Training |
| 09:35 - 10:35 | Introduction to data protection
- GDPR, scope and Brexit
- Principal definitions
|
| 10:35 - 11:35 | Data protection principles
- 7 principles
- Legal basis for processing
- Consent
|
| 11:35 - 11:50 | Mid-morning tea and coffee break |
| 11:50 - 12:10 | International transfers
- Adequacy
- Appropriate safeguards
- Binding corporate rules
- Derogations
- Privacy Shield
|
| 12:10 - 12:55 | Data subject rights
- Access
- Rectification
- Erasure
- Object
- Restrictions
- Portability
- Automated decisions
|
| 12:55 - 13:40 | Lunch |
| 13:40 - 14:10 | Security and breach reporting
- Appropriate measures
- Risk
- Encryption
- Breach management
|
| 14:10 - 14:30 | Data processors
|
| 14:30 - 14:50 | Data Protection Officers
- Who needs one?
- Eligibility
- Duties
|
| 14:30 - 14:50 | Afternoon tea and coffee break |
| 14:50 - 15:05 | Data protection by design
- Data protection by default
- Data protection impact assessments
|
| 15:05 - 15:25 | The accountability principle
|
| 15:25 - 15:45 | Enforcement
- The ICO
- Penalties
- Consistency
|
| 15:45 - 16:05 | Preparing an action plan |
| 16:45 - 16:55 | Questions and close |
