.svg)
General Data Protection Regulation (GDPR) Training helps individuals and organisations to understand the requirements of GDPR and take steps to ensure that they are compliant. Training can consist of basic data protection advice and guidance for all employees, or more in depth training for senior leads and staff in specialist roles. GDPR training can also be tailored to meet an organisation’s needs to cover key activities such as creating a Record of Processing Activity, completing Data Protection Impact Assessments or managing personal data breaches.
It is important that everyone who deals with personal information has an awareness of data protection principles and the requirements of GDPR. This ensures that they are aware of their responsibility when handling personal data and also aware of their rights with regard to their own personal data. GDPR training also improves overall security practices as staff learn that simple steps such as good passwords, keeping devices up to date and encryption can help to protect personal data.
Failure to comply with GDPR can result in data breaches that significantly impact on individuals, disrupt services and have reputational and financial impact, including potential fines from the Information Commissioners Office (ICO). By providing training to staff, organisations can demonstrate that they are committed to protecting personal data; giving staff, customers and other people whose personal data they may process, confidence that they are taking active steps to safeguard it.
All employees should have basic data protection training. Data Protection Officers/leads and staff in key roles such as HR, IT, and Procurement will require additional training as they will have more involvement in data processing activity and increased responsibilities.
The ICO requires organisations to have a training programme in place for all staff that includes induction and refresher training on data protection and information security. GDPR does not mandate frequency of training, however, the ICO states that to meet their expectations, training should be completed at induction and at the latest within a month of an employee’s start date and refreshed regularly, ideally annually but as a minimum every 2 years.
Staff in specialised roles or functions with key data protection responsibilities such as DPOs, subject access and records management teams, staff in HR, IT, and Procurement, should receive additional training beyond the basis level to help them fulfil their additional responsibilities.
Training can vary dependent on what the training needs are. It can vary from a 1 hour session for staff, to half day or full day training for key staff such as DPOs, Information Governance, HR, IT, and Procurement staff.
Please contact us via our website to discuss your training needs.
Got an enquiry? Please don't hesitate to contact us.
.png)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg){kind=small}