GDPR for Professionals: Everything You Need to Know

Explain the two GDPR roles, data controllers and data processors, and outline their responsibilities, security measures, contracts, and audits, with a case example of Explore California.

Explore the roles of data controllers, joint controllers, and third parties under the GDPR, and learn how processing agreements and audits protect data privacy and security.

Identify when a data protection officer is required and outline the DPO's six tasks: inform data subjects, advise on GDPR, conduct risk checks, ensure accountability, handle inquiries, and assist investigations.

Identify the four core responsibilities of a data controller under article 24, and implement documented processes, data mapping, risk-based protection, audits, and a code of conduct aligned with article 40.

Develop standardized runbooks and processes to accelerate data breach response, detailing system overview, setup, and recovery procedures. Ensure security roles and access are clear for quick, effective restoration.

Explore the five scenarios under article 17 of GDPR that require erasure—purpose, consent, objection, illegality, and legal obligation—and how deletion, retention, and storage relate to data subject rights.

Learn GDPR breach timing and the 72-hour notification rule, ensuring data subject notification and proactive internal response with privacy, security, legal teams, and a data protection officer contact.

Organizations manage stakeholder perceptions by proactively communicating during data breaches, using social media monitoring, and leveraging public relations to protect business and restore trust, though GDPR does not require PR.

Learn how a GDPR incident response protocol identifies root causes, mitigates data breaches, and minimizes customer impact while reducing losses, ensuring compliance, and guiding external forensics.

Explore how the European Data Protection Board guides consistent GDPR application through impartial governance and cooperation. It provides guidelines and best practices as online resources, and does not enforce GDPR.

Discover how data protection authorities enforce GDPR, from investigations to fines, with cases like WhatsApp and Marriott illustrating key violations: legal basis, security measures, and processing principles.

Map how the UK GDPR, implemented via the Data Protection Act 2018, aligns with the EU GDPR while applying domestic and cross-border data protections under the ICO.