Understanding the GDPR

Understand what the GDPR means for you as data subject, controller or processor

On 25 May 2018, the General Data Protection Regulation (GDPR), aiming to improve data protection for individuals across the EU, became directly applicable. Now, organisations need to be compliant with the new rules and should act immediately.

By developing good knowledge of the GDPR and understanding how it affects you, you will learn about the first steps for making your organisation compliant and can immediately start taking them. You will explore data subjects’ rights, data controllers’ and processors’ obligations, and enforcement and compliance notions in the context of the Regulation.

The course is specifically developed for professionals working for companies, public authorities and bodies, students, and anyone who wishes to know more about data protection and the GDPR, especially those handling personal data.

• Introduction to data protection and the GDPR
• General introduction
• Privacy and data protection
• EU legal regime on data protection
• Basic fundamentals of the GDPR
• Data protection principles, consent and minors
• Conclusion
• Rights of data subjects
• Introduction to data subjects' rights
• Transparency and modalities
• Rights of access, rectification, objection and restriction of processing
• Rights to erasure and data portability
• Rights with regard to complaints, judicial remedies, automated individual decision-making, representation and compensation
• Restrictions of rights
• Concluding data subjects' rights
• Obligations of controllers and processors
• Who are controllers and processors?
• Controller's obligations and responsibilities
• Information, notification and record keeping
• DPIA and DPO
• Joint controllers
• Processor's obligations and responsibilities
• Summary and concluding remarks
• GDPR enforcement and compliance
• Responsibilities, liabilities and penalties
• Data protection supervisory authorities
• Codes of conducts, certification mechanisms and binding corporate rules
• Data transfers and processing outside the EU
• Liabilities, responsibilities and penalties
• Conclusion