This webinar covers: - Staff awareness and the GDPR - Stakeholders, focus groups and planning - Managing change - Common challenges - Proven techniques and solutions A recording of the webinar can be found here: https://www.youtube.com/watch?v=C0HtBrDLKYg&t=222s

1. © IT Governance Ltd 2018
Presenter:StefanieRetfalvi,LearningDesign&SolutionsConsultant,ITGovernance
GDPR Compliance:
Getting Everyone On Board

2. © IT Governance Ltd 2018
Agenda
01
02
03
04
06
07
?
Q&A
05
Cyber Security
Awareness
Programme
GDPR Compliance:
Getting Everyone
on board

3. About IT Governance
& Introduction

4. © IT Governance Ltd 2018
About IT Governance

5. © IT Governance Ltd 2018
Introduction
• Stefanie Ildiko RETFALVI
• Learning Design & Solutions Consultant
• International cross-sector experience

6. © IT Governance Ltd 2018
Staff Awareness &
The GDPR

7. © IT Governance Ltd 2018
Article 36
1. (b) to monitor compliance with this Regulation, with other
Union or Member State data protection provisions and with
the policies of the controller or processor in relation to the
protection of personal data, including the assignment of
responsibilities, awareness-raising and training of staff
involved in processing operations, and the related audits;
“

8. © IT Governance Ltd 2018
Why it matters
ICO publication:
Preparing for the General Data Protection
Regulation (GDPR): 12 steps to take now

9. © IT Governance Ltd 2018
Stakeholders, Focus
Groups & Planning

10. © IT Governance Ltd 2018
Compliance affects Everyone
• C-Suite, senior management buy-in
(leading by example)
• DPOs, CISOs, CIOs
• Business process owners
• HR, change management, internal comms
• Focus groups
• Surveys

11. © IT Governance Ltd 2018
Managing Change

12. © IT Governance Ltd 2018
Dealing with resistance
Aversion to change
is natural
Resistance to Content
versus
Resistance to Process Consider this question
within your
organisational context

13. © IT Governance Ltd 2018
• Understand your audience(s)
• Align your strategy and your culture
• Read and rewrite the context
• Make use of proven engagement techniques
• Be opportunistic
Managing the Transition

14. © IT Governance Ltd 2018
To attain the highest levels of employee
engagement, it is important to generate
personal investment and motivation for
adopting the GDPR.
“
Bringing about a Change in Mindset

15. © IT Governance Ltd 2018
Common Challenges

16. © IT Governance Ltd 2018
The GDPR as a focal subject
• Viewed as dry
• Perceived as overwhelming
• Misconceptions (regarding
implications)

17. © IT Governance Ltd 2018
Training Audit Trail
True Engagement &
Behaviour Change

18. © IT Governance Ltd 2018
Proven Techniques
& Solutions

19. © IT Governance Ltd 2018
Identifying Problems
Identifying common drivers for
resistance or gaps in understanding
is the first step to gaining
organisation-wide buy-in.
“

20. © IT Governance Ltd 2018
Implementing a GDPR Awareness Programme
It is important to offer a
modern mix of different
GDPR-focused learning and
communications tools to
address individuals’ diverse
needs and preferences.
“

21. © IT Governance Ltd 2018
Gaining Buy-In
Don’t treat GDPR awareness
training like a bitter medicine
that everyone needs to swallow.
“

22. © IT Governance Ltd 2018
Example

23. © IT Governance Ltd 2018
Delivering Knowledge
Understanding the GDPR will help to
mitigate aversion to change and
reduce the human factor as a risk.
“

24. © IT Governance Ltd 2018
Example

25. © IT Governance Ltd 2018
Encouraging Knowledge Transfer to the Workplace
It is not enough to know what best
practice involves. Employees need
to apply their obtained knowledge in
their everyday activities.
“

26. © IT Governance Ltd 2018
Sample Solution
These should:
• Be meaningful, encouraging deep reflection and the transfer
of acquired knowledge to the workplace;
• Make learners active participants by challenging them to
recall key information in relevant contexts; and
• Prompt participants to identify risks and apply best practice
in situations that could arise in real life on the job.

27. © IT Governance Ltd 2018
Example

28. © IT Governance Ltd 2018
Continual monitoring of progress will
ensure that everyone has achieved
the required level of knowledge and
understanding.
“
Evaluation

29. © IT Governance Ltd 2018
Example

30. © IT Governance Ltd 2018
Once the programme is finished, it is
important to ensure that the GDPR
remains at the forefront of
individuals’ minds.
“
Continual Reinforcement

31. © IT Governance Ltd 2018
Useful References

32. © IT Governance Ltd 2018
Useful References
“GDPR in the workplace”
“Employee communication”
“Change management”
https://www.cipd.co.uk/
http://www.wfpma.com/
https://ico.org.uk/about-the-ico/what-we-do/taking-action-data-
protection/
https://www.itgovernance.co.uk/blog

33. © IT Governance Ltd 2018
Conclusion &
Your turn! Q&A

34. © IT Governance Ltd 2018
Conclusion

35. © IT Governance Ltd 2018
Call us
+44 (0)333 800 7000
Email us
servicecentre@itgovernance.co.uk
Visit our website
www.itgovernance.co.uk
Like us on Facebook
/ITGovernanceLtd
Follow us on Twitter
/itgovernance
Join us on LinkedIn
/company/it-governance
Read our blog
www.itgovernance.co.uk/blog
Stay in touch!

36. © IT Governance Ltd 2018
Queries?
Understanding?
Clarification?
Your Turn!