Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Fundamental Principles of Personal Data Processing
- National and international legal sources
- The applicability scope of personal data protection legislation
- The authority and powers of the data protection regulator
- Judicial mechanisms for protecting the right to data privacy
- GDPR – core concepts, definitions, and key selected issues
- Sector-specific GDPR provisions
- Definition and scope of personal data
- Concepts of data processing
- Legal foundations for processing personal data
- Responsibilities of the Data Controller (Administrator)
- Rights afforded to data subjects
- Administrative penalties and fines
- The Personal Data Protection Act of 10 May 2018 – regulatory scope
- Appointing a Data Protection Officer
- Proceedings related to violations of data protection laws
- Monitoring adherence to personal data protection regulations
- Civil, criminal, and administrative liability
- Conditions for valid processing of standard and sensitive personal data
- Legal requirements for outsourcing data processing to third parties
- Data Protection Impact Assessments (DPIA)
- Data protection by design and by default
- Legal bases for transferring personal data to third countries
- Data protection within employment relationships
Designation of a Data Protection Officer
- Mandatory requirements for appointing a Data Protection Officer
- Optional appointment of an Inspector
Eligibility as a Data Protection Officer
- Qualifications required to serve as an Inspector
- Employment structures for Inspectors
Position and Status of the Data Protection Officer
- Direct reporting lines from the Inspector to senior management
- Providing support to the Supervisor
- The Inspector’s involvement in all matters concerning personal data protection
- Prohibition against issuing instructions to the Supervisor regarding duty performance
- Mitigating conflicts of interest within the organization – the Supervisor’s role
- Protection against dismissal or disciplinary action for the Inspector
- The Inspector’s obligation to maintain confidentiality regarding performed tasks
Information Security Management
- Discussion of organizational security management systems, referencing Polish standards among others
- Identifying privacy risks and their legal consequences
- Principles of risk assessment and evaluating the impact of specific solutions on safety management effectiveness
- Applying a risk-based approach – practical completion of a Risk Analysis template
- Managing the lifecycle of personal data
Executing the Duties of the Data Protection Officer (DPO)
- Legal basis for DPO appointment
- Entities and circumstances requiring DPO appointment, and the process involved
- DPO status and necessary qualifications
- DPO responsibilities and guidelines for planning their execution
- Reporting on data processing compliance in both traditional and IT systems
- Documenting activities undertaken by the DPO
- Drafting inspection reports
- Protocols for supervising the documentation of personal data processing
- The scope of the UODO’s powers regarding DPOs
Practical Insights into Office for Personal Data Protection Inspections
- Expectations of the Office towards audited entities
- Strategies for preparing for an inspection
- Case study analysis
Practical Workshops
- Drafting a sample Information Security Policy
- Developing management instructions
- Creating a Register of Processing Activities
- Preparing simplified Personal Data Protection Documentation
- Case study application
- Common pitfalls in documentation preparation
Supplementary Resources for Participants:
Essential Forms and Templates:
- Consent for the use and distribution of images
- Event newsletter subscription form
- Consent for sending commercial offers
- Templates for sending offer emails
- Templates for sending general emails
- Sample personal data protection policy
- Template for fulfilling information obligations under the GDPR, including instructions
- Risk analysis template
- Register of personal data processing activities – template
- Register of categories of processing activities – template
- GDPR Breach Register – Template
- GDPR Compliance Checklist Template
- Guidelines for responding to personal data protection violations
- Data Protection Breach Report Template
- Register of security incidents and corrective/preventive actions
- Register of corrigenda
- Register of restorations
- Model corrigendum
- Restoration pattern
- Model objection
- Model contract prohibiting further processing of personal data
- Sample consents for competitions, marketing, and publications
- Information obligations regarding ferry crossing
- Information obligations regarding meeting monitoring
- Information obligations in recruitment processes
- Information obligations towards the National Revenue Administration
- Information obligations under the LES
- Information obligations under Public Procurement Law (UCoC)
- Information obligations under the Labour Code
- Tax-related information obligations
- Employee consent to process personal data: template with example
- Notification to data subjects of a breach – template
- Personal Data Processing Agreement for the Controller – template
- Personal Data Processing Agreement for the Processor
- And many additional resources
Requirements
Target Audience
- Professionals currently stepping into the role of Data Protection Officer.
- Individuals expected to be appointed to this position in the future.
Testimonials (1)
The variety of the information shared and the clarity to explain terms in plain English.
