Programme
Module 1, Legal framework (1 hour)
- Regulation (EU) 2016/679 (GDPR): structure and general principles
- Key roles: controller, processor, appointed handler/authorised person
- Lawful bases for processing and compatible purposes
- Data subjects’ rights and information obligations
Module 2, Lawful processing and security measures (2 hours)
- The principles of data minimisation, purpose limitation and accuracy
- Technical and organisational measures appropriate under Article 32 of the GDPR
- Managing access credentials and confidentiality
- Personal data breaches: recognising them and internal reporting procedures
Module 3, Practical cases and learning check (1 hour)
- Common operational scenarios: data subject requests, emails containing personal data, paper documents
- Common mistakes and good day-to-day practice
- Final assessment test
Objectives
Give authorised persons a concrete awareness of the responsibilities arising from the GDPR, of the security measures to adopt and of correct practice in the day-to-day handling of personal data, in line with Articles 29 and 32 of Regulation (EU) 2016/679.