Downloaded 17 times
Uploaded bySteve Hilton
GDPR and Data Breach notifications
The document discusses GDPR compliance, outlining a phased approach that includes understanding the regulations, assessing risks, implementing necessary measures, and demonstrating control over data management. It emphasizes the need for clear data retention policies, protocols for data breach notifications, and data protection impact assessments. Additionally, it highlights the importance of managing individual rights and obtaining employee consent for HR data processing.
Law◦
More Related Content
Similar to GDPR and Data Breach notifications
![[Webinar Slides] Data Privacy – Learn What It Takes to Protect Your Information](https://cdn.slidesharecdn.com/ss_thumbnails/dataprivacylearnwhatittakestoprotectyourinformation-170726194519-thumbnail.jpg?width=640&height=640&fit=bounds)
GDPR and Data Breach notifications
- 1.
- 2.
- 3.
- 4. Apps That MobiliseLives 4 Public Health England Hackathon winners
- 5.
- 6.
- 7.
- 8.
- 9.
- 10.
- 11.
- 12.
- 13.
- 14.
- 15.
- 16. @LibertyAppsUK@CYBERTALKLDN Phase 1: Needto understand
- 17.
- 18. @LibertyAppsUK@CYBERTALKLDN Phase 2: AssessRisk (1 of 2)
- 19. @LibertyAppsUK@CYBERTALKLDN Phase 2: AssessRisk (2 of 2)
- 20.
- 21.
- 22.
- 23. @LibertyAppsUK@CYBERTALKLDN Do we havea data retention policy? It is down to the board of directors to decide what that retention policy is, when and how will this approval be received? – data must not be kept for any longer than is deemed necessary.
- 24.
- 25. @LibertyAppsUK@CYBERTALKLDN • How wouldwe erase an individuals’ data? • What is our process for correcting individuals’ data? • Can we manage / remove consent for direct marketing and automated decision making?
- 26. @LibertyAppsUK@CYBERTALKLDN What will wedo if a customer exercises their rights? How would we handle a request? What processes & policies do we have in place should we plan to refus What will our partners whom we share data with need to do? Do we have confidence that these partners are compliant and would no
- 27.
- 28.
- 29. @LibertyAppsUK@CYBERTALKLDN Employers can’t relyon employee consent to process HR data
- 30. @LibertyAppsUK@CYBERTALKLDN Employers can’t relyon employee consent to process HR data
- 31.
- 32.
- 33. @LibertyAppsUK@CYBERTALKLDN What willwe do if there is a breach? How would we detect, report and investigate a breach? To manage effective & efficient investigation: Assess which types of data are held. Document which types fall within the notification requirement and the process to be followed if there is a breach.
- 34.
- 35. @LibertyAppsUK@CYBERTALKLDN Optimal data breachnotification timeline
- 36.
- 37.
- 38.
- 39.
- 40.
- 41.
- 42. @LibertyAppsUK@CYBERTALKLDN How would weimplement an assessment in our organisation? Who would carry it out? Would it be run centrally or locally?
- 43. @LibertyAppsUK@CYBERTALKLDN A data protectionimpact assessment (DPIA) is a process to help you identify and minimise the data protection risks of a project. Data protection impact assessments (DPIA)
- 44. @LibertyAppsUK@CYBERTALKLDN Data protection impactassessments (DPIA)
- 45.
- 46.
- 47.
- 48. @LibertyAppsUK@CYBERTALKLDN Control over processesthat collect and use personal data?
- 49.
- 50.
- 51.
- 52.
- 53. @LibertyAppsUK@CYBERTALKLDN Consent and individualrights management.
- 54.
- 55. @LibertyAppsUK@CYBERTALKLDN Difficulty identifying andreporting a breach within 72 hours 2017 VERITAS GDPR REPORT https://www.veritas.com/content/dam/Veritas/docs/reports/gdpr-report-ch2-en.pdf
- 56. @LibertyAppsUK@CYBERTALKLDN Are former employeesable to access company data? 2017 VERITAS GDPR REPORT https://www.veritas.com/content/dam/Veritas/docs/reports/gdpr-report-ch2-en.pdf
- 57. @LibertyAppsUK@CYBERTALKLDN The enemy within? 2017Varonis Data Risk Report https://info.varonis.com/hubfs/docs/research_reports/2017-data-risk-report.pdf
- 58. @LibertyAppsUK@CYBERTALKLDN GDPR is anEvolutionary Process
- 59.
- 60.