Presented at Executive Leaders Network CMO/DPO/CIO/CISO Event on October 06th. ""It’s already been four and a half years from that famous date in May 2018 – in this session, Alan Cooke, Senior Privacy Consultant at DataGuard, talks about learnings and assesses the status quo. A downstream benefit of GDPR coming into effect was surely to enhance data protection for the individual - the people behind the data if you like - making knowledge, help, guidance and most importantly control about their personal data more accessible. How much has this objective been realised? And how much have data protection professionals helped with moving businesses and industries forward to create more transparency, control and accessibility around the use of personal data since May 2018? This session is an accessibility pulse check for all things privacy, like data privacy on websites, subject access requests, consents for communication and working with authorities. Where do we stand after over 4 years of GDPR? Key Takeaways: • Thoughts about how well GDPR has improved accessibility, transparency, and control over personal data for the individual • Is GDPR more accessible for the individual, or does it even need to be? • Is there a role for data protection professionals in helping GDPR reach the masses? • What’s next?"

1. Alan Cooke
Senior Privacy Consultant, DataGuard UK
(UK) GDPR – An Accessibility Pulse
Check
Data Protection & Privacy Leaders Conference
October 06, 2022

2. Has the UK GDPR
improved
accessibility,
transparency, and
control over personal
data?
 Growth of understanding UK GDPR offers
individual certain “rights“ concerning
their data
 What about the accessibility of genuine
rights and their application?

3. Challenges
Article 38 – 1. The
controller and the
processor shall
ensure that the data
protection officer
is involved,
properly and in a
timely manner, in
all issues which
relate to the
protection of
personal data.
Article 38 – 3. The
controller and
processor shall
ensure that the data
protection officer
does not receive any
instructions
regarding the
exercise of those
tasks.

4. 11.1 4
Data protection
(not) by design
and by default
Incomprehensible
Privacy Policies
A little
knowledge is a
dangerous thing
(data subjects
and
organisations)
Confusing or
missing access
or contact
portals
Challenges – cont‘d

5. Deliver the regulations to suit the
organisation and business environment
Key stakeholders and drivers at the highest
level
Delivery and use of the fundamental tools
The organisation has to deliver the programme,
not the DPO
Ensure the Privacy Policy can be read by anyone
– preferably understood!
Our role – what we
do as providers
and facilitators

6. Summary?
 Back to the pulse check...
 Better knowledge and understanding with the
audience? But, do they want it or care?
 Do we provide improved accessibility?
 My takeaway – to aim to build in to my data protection/GDPR support
and review for any organisation (no matter how large or small) time
to look at the end of the process as well as the start. Am I helping
an individual work back upstream to understand why their data is
being gathered and processed…

7. Visit us booth #3
Thank you!