GDPR Implementation: a practitioner's perspective - John Gilchrist

•Download as PPTX, PDF•

0 likes•123 views

sherif user group

Slides from sherif event on eResources data: what does it really tell you? - February 2018

Education

GDPR Implementation –
A Practitioners Perspective
Briefing for Sherif- 27 February 2018

© Middlesex University
My experience as a DP Professional
• Information Governance Officer at
MDX since January 2017
• Previously auditor at the ICO – gave
me a grounding in the practical
implementation of the legislation
Briefing for Sherif | 3

© Middlesex University
Foundation for achieving compliance
• Production of a Gap Analysis and
Readiness Report
• Information Governance Group – with
executive support and stakeholder
engagement
Briefing for Sherif | 5

© Middlesex University Briefing for Sherif | 7
Data Breach Notification
Policy and structured
reporting process

© Middlesex University Briefing for Sherif | 8
Data Protection and
Information Security
training

© Middlesex University Briefing for Sherif | 9
Contract management and
supplier relationships

© Middlesex University Briefing for Sherif | 10
Privacy Notices

© Middlesex University Briefing for Sherif | 12
Data Protection Impact
Assessments

© Middlesex University Briefing for Sherif | 13
Information Asset
Registers and Records of
Processing Activity

© Middlesex University Briefing for Sherif | 14
Volume of SARs and
managing other individual
rights

© Middlesex University Briefing for Sherif | 15
Continued stakeholder
engagement as we move
towards ‘business as
usual’

Summary and
Questions
| 16
John Gilchrist – Information
Governance Officer
j.gilchrist@mdx.ac.uk

Similar to GDPR Implementation: a practitioner's perspective - John Gilchrist

GDPR non-compliance risks & GDPR365

Jaco Liebenberg

Common Practice in Data Privacy Program Management

Eryk Budi Pratama

Watch the webinar on-demand: https://info.trustarc.com/building-pia-dpia-program-webinar.html DPIA/PIA guidance, tips for success and case studies from the field. The GDPR mandates Privacy by Design and requires documented Data Protection Impact Assessments (DPIAs) for high risk processing. How can you build this into a sustainable program across your business? Having a good understanding of what DPIA/PIAs are and how to implement them can be the key to embedding privacy in the heart of your organization as well as achieving GDPR compliance. Watch this webinar on-demand to: - Hear PIA best practices - Review GDPR compliance requirements - Receive a range of tips and tools to help streamline and embed the process - Hear how Volvo Financial Services has approached assessments across their organization To register for upcoming/on-demand webinars visit: https://www.trustarc.com/events/webinar-schedule/

Building Your DPIA/PIA Program: Tips & Case Studies [TrustArc Webinar Slides]

TrustArc

Keep your data safe and be compliant via a 360° approach

Nagib Aouini

Approaching Information Management from a Framework Perspective

Rob Gerbrandt CD, PMP

David Reeve - UKAD 2016 forum

The-National-Archives

Information architecture

DougalMcLachlan

By embracing the importance of GDPR and leveraging ISO/IEC 27701, you can enhance your data protection practices, achieve compliance, and minimize the risk of penalties. Amongst others, the webinar covers:  Importance of Data Protection  Understanding Data Collection and Challenges  Introduction to GDPR  Key Principles of GDPR  Who does GDPR Apply to and Its Global Implications  Introduction to ISO/IEC 27701  Implementing ISO/IEC 27701  Privacy by Design  Dealing with IT on a Daily Basis  Building Awareness and Training  Audit, Data Discovery, and Risk Assessments Presenters: Mike Boutwell Mike Boutwell is a Senior Information Security Specialist with over 15 years of experience in security and 10 years of risk management experience, primarily focused on financial services. He excels in collaborating with CISOs and other executive leadership to build and implement security frameworks aligned with business objectives and developing enterprise-wide security requirements. Mike has a strong track record of securing assets worth over $1 quadrillion and delivering $100M+ projects. Mike is a certified CISSP, CISA, CGEIT, ISO 27001 Senior Lead Implementer, ISO 27001 Senior Lead Auditor, ISO 38500 Senior Lead IT Governance Manager, ISO 27032 Senior Lead Cyber Security Manager, and Certified Non-Executive Director. Lisa Goldsmith Lisa Goldsmith is the founder of LJ Digital and Data Consultancy. Lisa has over 23 years’ experience of supporting leadership teams in membership, charity, and wider not-for-profit organisations to simplify their IT and digital strategy that allows them to sleep soundly at night, knowing their systems and processes are fit for purpose, GDPR compliant, secure and that they deliver value to staff, members, and stakeholders. Prior to starting her own consultancy, Lisa gained extensive experience working for membership organisations and has knowledge and expertise at all levels of operations from working within careers and qualifications teams, as Membership Manager, as Head of Digital & IT for delivering large-scale digital, IT and GDPR compliance projects and serving on several Senior Leadership Teams. Lisa is also currently a Trustee of the BCLA and Groundwork East. Date: June 27, 2023 ------------------------------------------------------------------------------- Find out more about ISO training and certification services Training: https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27701 Webinars: https://pecb.com/webinars Article: https://pecb.com/article Whitepaper: https://pecb.com/whitepaper For more information about PECB: Website: https://pecb.com/ LinkedIn: https://www.linkedin.com/company/pecb/ Facebook: https://www.facebook.com/PECBInternational/ Slideshare: http://www.slideshare.net/PECBCERTIFICATION YouTube video: https://youtu.be/lfJrSLaGDtc Website: https://bit.ly/437GOnG

GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...

PECB

Data Management Support at Leiden University

LIBER Europe

Data- and database security & GDPR: end-to-end offer

Capgemini

Ch3 cism 2014

Aladdin Dandis

Rick Wilson - Information Governance For IT Professionals

ARMA International

Insider threat seems to be one of the biggest risks for organisations looking to protect their data assets. Enterprises spend large proportion of their budget to secure and protect their most critical assets from exfiltration and leakage. However, it's not all about nation state and espionage, it's about identifying potential insider threat scenarios, understanding the organisation’s critical assets and the controls to protect them. With the recent spate of data breaches originating from trusted insiders, how do enterprises ensure their data assets are safe from insider threat and appropriate controls are in place? What models have been implemented to identify potential insider threat scenarios? Which critical data assets must be safeguarded? What combination of technologies are required to protect against insider threat? Is there a psychology element? The session seeks to answer these questions by sharing experience from two use cases; one which approached the problem from a technical perspective, and the other using consolidation of existing technology data sets.

Establishing an insider threat programme: Know your Snowden - Puneet Kukreja,...

Puneet Kukreja

Whos role is it anyway

IRIS

16.00 qs6 mon jo lambert

UKSG: connecting the knowledge community

Organisations in the not-for-profit sector are facing increased scrutiny of their arrangements for information security. New regulatory standards, such as GDPR, will place information governance higher than ever before on the senior management agenda. Balancing the obligations around personal information with cost-effective protection will have major implications for current systems. In this session sector specialists from Adapta Consulting will discuss the frameworks and controls that need be in place

Microsoft dynamics 365 for small and medium sized charities - session 2 gdpr

m-hance

Data Quality Assurance: An Impetus in Improving Partner(s) Data Management an...

National Organization of Peer Educators (NOPE Kenya)

Institutional research data services in Higher Education. Session 2.1 of the RDMRose v3 materials. The JISC funded RDMRose project (June 2012-May 2013) was a collaboration between the libraries of the University of Leeds, Sheffield and York, with the Information School at Sheffield to provide an Open Educational Resource for information professionals on Research Data Management. The materials were revised between November 2014 and February 2015 for the consortium of North West Academic Libraries (NoWAL). http://www.sheffield.ac.uk/is/research/projects/rdmrose

RDMRose 2.1 Research data services

RDMRose

Enterprise policy-management

Amit Bhargava

Research Data Management Roadmap@Edinburgh

EDINA, University of Edinburgh

Similar to GDPR Implementation: a practitioner's perspective - John Gilchrist (20)

GDPR non-compliance risks & GDPR365

Common Practice in Data Privacy Program Management

Building Your DPIA/PIA Program: Tips & Case Studies [TrustArc Webinar Slides]

Keep your data safe and be compliant via a 360° approach

Approaching Information Management from a Framework Perspective

David Reeve - UKAD 2016 forum

Information architecture

GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...

Data Management Support at Leiden University

Data- and database security & GDPR: end-to-end offer

Ch3 cism 2014

Rick Wilson - Information Governance For IT Professionals

Establishing an insider threat programme: Know your Snowden - Puneet Kukreja,...

Whos role is it anyway

16.00 qs6 mon jo lambert

Microsoft dynamics 365 for small and medium sized charities - session 2 gdpr

Data Quality Assurance: An Impetus in Improving Partner(s) Data Management an...

RDMRose 2.1 Research data services

Enterprise policy-management

Research Data Management Roadmap@Edinburgh

Recently uploaded

Kodo Millet PPT made by Ghanshyam bairwa college of Agriculture kumher bhara...

pradhanghanshyam7136

Klinik_ Apotek Onlin 085657271886 Solusi Menggugurkan Masalah Kehamilan Anda Jual Obat Aborsi Asli KLINIK ABORSI TERPEECAYA _ Jual Obat Aborsi Cytotec Misoprostol Asli 100% Ampuh Hanya 3 Jam Langsung Gugur || OBAT PENGGUGUR KANDUNGAN AMPUH MANJUR OBAT ABORSI OLINE" APOTIK Jual Obat Cytotec, Gastrul, Gynecoside Asli Ampuh. JUAL ” Obat Aborsi Tuntas | Obat Aborsi Manjur | Obat Aborsi Ampuh | Obat Penggugur Janin | Obat Pencegah Kehamilan | Obat Pelancar Haid | Obat terlambat Bulan | Ciri Obat Aborsi Asli | Obat Telat Bulan | Pil Aborsi Asli | Cara Menggugurkan Konten | Cara Aborsi Tuntas | Harga Obat Aborsi Asli | Pil Aborsi | Jual Obat Aborsi Cytotec | Cara Aborsi Sendiri | Cara Aborsi Usia 1 Bulan | Cara Aborsi Usia 2 Tahun | Cara Aborsi Usia 3 Bulan | Obat Aborsi Usia 4 Bulan | Cara Abrasi Usia 5 Bulan | Cara Menggugurkan Konten | Kandungan Obat Penggugur | Cara Menghitung Usia Konten | Cara Mengatasi Terlambat Bulan | Penjual Obat Aborsi Asli | Obat Aborsi Garansi | Kandungan Obat Peluntur | Obat Telat Datang Bulan | Obat Telat Haid | Obat Aborsi Paling Murah | Klinik Jual Obat Aborsi | Jual Pil Cytotec | Apotik Jual Obat Aborsi | Kandungan Dokter Abrasi | Cara Aborsi Cepat | Jual Obat Aborsi Bergaransi | Jual Obat Cytotec Asli | Obat Aborsi Aman Manjur | Obat Misoprostol Cytotec Asli. "APA ITU ABORSI" “Aborsi Adalah dengan membendung hormon yang di perlukan untuk mempertahankan kehamilan yaitu hormon progesteron, karena hormon ini dibendung, maka jalur kehamilan mulai membuka dan leher rahim menjadi melunak,sehingga mengeluarkan darah yang merupakan tanda bahwa obat telah bekerja || maksimal 1 jam obat diminum || PENJELASAN OBAT ABORSI USIA 1 _7 BULAN Pada usia kandungan ini, pasien akan merasakan sakit yang sedikit tidak berlebihan || sekitar 1 jam ||. namun hanya akan terjadi pada saatdarah keluar merupakan pertanda menstruasi. Hal ini dikarenakan pada usiakandungan 3 bulan,janin sudah terbentuk sebesar kepalan tangan orang dewasa. Cara kerja obat aborsi : JUAL OBAT ABORSI AMPUH dosis 3 bulan secara umum sama dengan cara kerja || DOSIS OBAT ABORSI 2 bulan”, hanya berbedanya selain mengisolasijanin juga menghancurkan janin dengan formula methotrexate dikandungdidalamnya. Formula methotrexate ini sangat ampuh untuk menghancurkan janinmenjadi serpihan-serpihan kecil akan sangat berguna pada saat dikeluarkan nanti. APA ALASAN WANITA MELAKUKAN ABORSI? Aborsi di lakukan wanita hamil baik yang sudah menikah maupun belum menikah dengan berbagai alasan , akan tetapi alasan yang utama adalah alasan-alasan non medis (termasuk aborsi sendiri / di sengaja/ buatan] MELAYANI PEMESANAN OBAT ABORSI SETIAP HARI, SIAP KIRIM KESELURUH KOTA BESAR DI INDONESIA DAN LUAR NEGERI. HUBUNGI PEMESANAN LEBIH NYAMAN VIA WA/: 085657271886

Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...

ZurliaSoop

Introduction to Nonprofit Accounting: The Basics

TechSoup

𝐋𝐞𝐬𝐬𝐨𝐧 𝐎𝐮𝐭𝐜𝐨𝐦𝐞𝐬: -Discern accommodations and modifications within inclusive classroom environments, distinguishing between their respective roles and applications. -Through critical analysis of hypothetical scenarios, learners will adeptly select appropriate accommodations and modifications, honing their ability to foster an inclusive learning environment for students with disabilities or unique challenges.

Understanding Accommodations and Modifications

MJDuyan

Unit-V; Pricing (Pharma Marketing Management).pptx

VishalSingh1417

Making communications land - Are they received and understood as intended? webinar Thursday 2 May 2024 A joint webinar created by the APM Enabling Change and APM People Interest Networks, this is the third of our three part series on Making Communications Land. presented by Ian Cribbes, Director, IMC&T Ltd @cribbesheet The link to the write up page and resources of this webinar: https://www.apm.org.uk/news/making-communications-land-are-they-received-and-understood-as-intended-webinar/ Content description: How do we ensure that what we have communicated was received and understood as we intended and how do we course correct if it has not.

Making communications land - Are they received and understood as intended? we...

Association for Project Management

ICT Role in 21st Century Education & its Challenges.pptx

AreebaZafar22

Sociology 101 Demonstration of Learning Exhibit

jbellavia9

Food safety_Challenges food safety laboratories_.pdf

Sherif Taha

2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx

MaritesTamaniVerdade

Key note speaker Neum_Admir Softic_ENG.pdf

Admir Softic

Mixin Classes in Odoo 17 How to Extend Models Using Mixin Classes

Celine George

Towards a code of practice for AI in AT.pptx

Jisc

ICT role in 21st century education and it's challenges.

MaryamAhmad92

Graduate Outcomes Presentation Slides - English

neillewis46

Explore the world of IT certification with CompTIA. Discover how the CompTIA Security+ Book SY0-701 can elevate your cybersecurity expertise and open doors to new career opportunities. This PDF provides essential insights into the CompTIA Security+ certification, guiding you through exam preparation and showcasing the benefits of becoming CompTIA-certified. Download now to embark on your journey to IT excellence with CompTIA.

ComPTIA Overview | Comptia Security+ Book SY0-701

bronxfugly43

Spellings Wk 3 English CAPS CARES Please Practise

AnaAcapella

Dyslexia AI Workshop for Slideshare.pptx

callscotland1987

Salient Features of India constitution especially power and functions

KarakKing

HMCS Max Bernays Pre-Deployment Brief (May 2024).pptx

Esquimalt MFRC

Recently uploaded (20)