The document discusses GDPR compliance and data protection. It emphasizes that organizations cannot forget about GDPR, and must have policies, procedures, and documents updated, a designated data protection officer appointed and trained, and staff updated. It also stresses the importance of changing organizational culture regarding data protection. The document warns that a lack of priority, confusion, and denial regarding GDPR can lead to data breaches through hacks, theft, unauthorized sharing of data, or lack of proper processes.

1. HR for Education 2018

2. Dai Durbridge
Browne Jacobson
GDPR: sharing experience and
solutions

3. Can we forget about it yet?
Er, no. Sorry
Treat it like safeguarding

4. Can we forget about it yet?

5. Where you need to be
1. Policies, procedures and
documents updated
2. DPO appointed and trained
3. Staff updated
4. Culture changed/changing

6. How to get there
1. Sort out your docs
2. Support your DPO
3. Training outcomes
4. Change your culture
5. Muscle reflex

7. Themes
1. Ongoing confusion
2. Denial
3. Low priority
The result?

8. Breaches
1. Hack

9. Breaches
2. Theft

10. Breaches
3. Frolic of their own

11. Breaches
4. Email

12. Breaches
5. Lack of process

13. Common themes
1. Importance
2. Training
3. IT
4. Culture

14. Points to takeaway
1. Important and not going away
2. DPO –v- DSL
3. Culture change
4. Evidence outcomes
5. Breach management

15. Thank you
Dai Durbridge
Partner
t: 0330 045 2105
e: dai.durbridge@brownejacobson.com