GDPR Workshop Khóa Học Đào Tạo

Introduction to GDPR

• Defining personal and sensitive data
• Selecting your implementation team
• Interpreting key GDPR terminology
• Implementing privacy by design and privacy by default

Team Appointment

• Identifying key stakeholders (legal, marketing, IT, HR) to support GDPR efforts
• Understanding the role of a DPO and assessing the necessity of one

Permissions

• Determining if data qualifies as personal
• Managing access rights for data
• Defining data storage methods and locations (electronic or physical)
• Ensuring data security

Rights and Obligations

• Data Subjects and their associated rights
• Responsibilities of Controllers
• Responsibilities of Processors
• Managing data subject requests
• Handling international data transfers
• Identifying data breaches
• Understanding fines and penalties
• Overseeing third-party services
• Regulating cross-border data transfers

Policy and Procedure Development (Legal Aspects)

• Drafting data privacy policies for employees and clients
• Documenting the legal basis for data retention
• Establishing codes of conduct for data collection and handling
• Reviewing third-party contracts with suppliers

Ongoing Maintenance

• Data accuracy – ensuring held data remains current
• Updating privacy notices and procedures in response to GDPR amendments
• Revising contracts as necessary