Data Protection Compliance – Bespoke Training for your Business

May 2017

The European General Data Protection Regulation (“GDPR”), effective 25 May 2018, focuses heavily on accountability and being able to demonstrate compliance.

To start preparing your company for compliance, Whitney Moore’s Privacy & Data Protection Group provides tailored training to businesses, addressing the following topics:

How data protection laws apply to your business
Are you a data controller, a data processor or both?
Your obligations to keep data secure and how to meet those requirements
What you can do with the data you are holding
An individual’s rights over the data you hold about them
Consent and exploring other legal justifications for the collection and use of data
Data protection issues in the workplace and best practice
Monitoring internet usage, personal emails and use of CCTV
Outsourcing, and dealing with third party service providers including cloud services
Your marketing practices and whether you have to change your ways
Transferring data outside of the EEA in a legally compliant manner
Retention of data and enforcing deletion policies
Preparing your business’s compliance for the EU General Data Protection Regulation:
What new issues arise relating to consent
How to prove your compliance
New rules and obligations for data processors
Do we need to appoint a data protection officer?
Privacy impact assessments
Increased individual rights
Data portability
Updated marketing restrictions
Data breach notifications

We also provide the following additional services:

Review / draft data protection policies in accordance with best practice including:
- Privacy policy
- Security policy
- Data breach policy
- Access policy
Review of employment contracts
Review of third party service contracts
Training and information sessions for managers and employees
Advising on data protection issues as they arise
Advising on managing data breaches

John Lynch, Emma Richmond, Marie Claire Scullion, David Pierse