GDPR Workshop Khóa Học Đào Tạo

Understanding the GDPR

• Distinguishing between personal and sensitive data
• Selecting the appropriate team members
• Clarifying key GDPR terminology
• Implementing privacy by design and privacy by default

Assembling a Dedicated Team

• Identifying personnel to support GDPR efforts (legal, marketing, IT, HR)
• Understanding the role of a Data Protection Officer (DPO) and determining necessity

Data Permissions and Access

• Determining whether information constitutes personal data
• Defining who has access to the data
• Managing storage methods, such as electronic or paper-based systems
• Implementing data security measures

Rights and Obligations

• Data Subjects and their respective rights
• Obligations of the Data Controller
• Obligations of the Data Processor
• Handling data subject requests
• Conducting international data transfers
• Defining what constitutes a data breach
• Understanding fines and penalties
• Managing third-party services
• Addressing cross-border data transfers

Developing Policies and Procedures (Legal Considerations)

• Drafting data privacy policies for employees and clients
• Documenting the legal basis for data possession
• Establishing codes of conduct for data collection and handling
• Reviewing external third-party contracts with suppliers

Ongoing Maintenance

• Keeping data records current and accurate
• Updating privacy notices and procedures in response to GDPR changes
• Adjusting contracts as necessary