This course is available by: Classroom, Virtual-LIVE and eLearning
 

Classroom This course can be attended on an in-person basis at dedicated training venues (the yellow box below lists the upcoming dates and cities). There are ample opportunities to network with other delegates during coffee breaks and at the sit-down lunch.
Virtual-LIVE (WEBEX) For those who prefer undertaking LIVE training remotely, PDP’s virtual courses allow delegates to interact directly with the trainer and to participate in group activities, mirroring the typical structure of Classroom sessions.
eLearning PDP’s eLearning courses are facilitated via a dedicated learning platform using videos, supplementary documentation and multiple choice self-assessment questions. The content can be viewed at any time allowing delegates to train around other commitments. Find out more on PDP’s eLearning courses.

Conducting Data Protection Impact Assessments

Course Overview:

The General Data Protection Regulation (GDPR) requires Data Protection Impact Assessments (DPIAs) to be carried out wherever processing activities are likely to result in a high risk for individuals. Organisations may also choose to carry out DPIAs even where it is not a legal requirement, since there can be important benefits of doing so.

DPIAs enable organisations to assess potential data protection and other privacy implications at the design stage of a new system or process. Such risks can be assessed and addressed within the development of the system or process, rather than being a “bolt-on” after implementation (when it may be too late to address all the concerns, at least without significant cost implications).

Different approaches and levels of assessment can be undertaken depending on the nature of the system/process and the size of the organisation. This course gives practical guidance on conducting DPIAs, and includes:

• what is a DPIA, and when should one be carried out
• national regulators’ recommendations and guidance
• stages of a DPIA and what to do in practice: initial assessment, preparation, information flows, consultation with stakeholders, analysis, documentation
• the relationship between conducting DPIAs with other risk and project management activities (e.g. other risk assessments, data protection audits)
• legal and compliance issues to consider

Attendance on this course can be used as credit towards gaining the Practitioner Certificate in Data Protection.