This course is available by: Classroom, Virtual-LIVE and eLearning
 

Classroom This course can be attended on an in-person basis at dedicated training venues (the yellow box below lists the upcoming dates and cities). There are ample opportunities to network with other delegates during coffee breaks and at the sit-down lunch.
Virtual-LIVE (WEBEX) For those who prefer undertaking LIVE training remotely, PDP’s virtual courses allow delegates to interact directly with the trainer and to participate in group activities, mirroring the typical structure of Classroom sessions.
eLearning PDP’s eLearning courses are facilitated via a dedicated learning platform using videos, supplementary documentation and multiple choice self-assessment questions. The content can be viewed at any time allowing delegates to train around other commitments. Find out more on PDP’s eLearning courses.

Handling Access Requests

Course Overview:

Dealing effectively with requests for access to personal data remains a significant management challenge for many organisations. Requests can come from customers, employees, complainants and others. In Ireland, individuals’ awareness of their information rights, as well as their expectations of access, has reached an unprecedented level. Responding to Access Requests is a drain on staff time and budgets.

Additionally, there has been an increase in the number of complaints to the Data Protection Commission about the failure of organisations to deal with Access Requests appropriately.

This practical training course, which is fully up to date with the requirements of the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, looks at the process of handling and responding to Access Requests, including:

• understanding the rights of individuals to gain access to information held by organisations
• the formalities for making a request, including determining whether a valid request has been made
• how to liaise with the requester to clarify the request if necessary
• the fees and time limits
• analysing whether paper records fall within the law
• tips for the conduct of searches for personal data - setting parameters and collating the results
• establishing whether the retrieved information is 'personal data'
• dealing with third party data
• applying exemptions which may allow the organisation to withhold certain information
• handling requests from other persons - e.g. solicitors, financial advisors, public representatives or parents
• presenting the response to the applicant, including how to redact documents
• managing dissatisfied requesters
• guidance from the Data Protection Commission and the European Data Protection Board
• how to deal with complaints from requesters and investigations by the Commissioner’s Office
• staff awareness and training

Participants in this training course will acquire the knowledge necessary to effectively manage Access Requests in their organisation and to instigate a process for dealing with such requests.

Participants will work through the Commissioner's guidance and a number of practical scenarios with expert guidance from one of the leading experts on managing Access Requests.

There will be plenty of opportunity for questions at the Training course.

Attendance on this course can be used as credit towards gaining the Practitioner Certificate in Data Protection.