Data Protection

Course aims

The aim of the course is to give an easy to understand overview of data protection law and then to highlight issues that arise for businesses, how to deal with those issues, and how to keep the burden of compliance to a minimum.

Who can benefit from attending the course?

Data Protection affects anyone in an organization who handles personal data, in different ways. We can tailor the course to the requirements of individual departments, such as Marketing, IT, Legal or retail branch managers.

The following is typical of the course content, although the emphasis of each course will depend on the audience.

Introduction to the Data Protection Act 1998

  • When does the Act apply and what exemptions are available?
  • What are a data controller's general obligations?
    • Registration
    • The 8 Data Protection Principles
      • Processing fairly and lawfully
      • Obtaining and using only for
        specified and lawful purposes
      • Adequate, relevant and not excessive
      • Accurate, and where necessary,
        kept up todate
      • Keeping for no longer than necessary
      • Processing in accordance with the
        individual's rights
      • Keeping secure
      • Transferring only to countries that offer
        adequate data protection
    • Compliance with individuals' rights

Enforcement and Compliance

  • What are the consequences of a breach of the Act?
  • Individual versus corporate liability

Individuals' Rights under the Act

  • How can an individual object to your activities?

  • The subject access right
    • What does a subject access request cover?
    • How to minimize the burden
  • Other rights

Employees

  • What obligations/rights should employees
    be aware of?
  • How does data protection law apply to
    information about your employees?

Marketing

  • Consent and fair obtaining
  • Information passing to and from other parties
  • Specific Regulations
  • Electronic marketing

Passing Data Overseas

  • General Prohibition
  • How to get around it

Miscellaneous issues

  • CCTV
  • Monitoring communications
  • Business Transfers
  • Outsourcing