Courses take place in:

London, Manchester, Belfast and Edinburgh

Data protection law requires that personal information be held and used securely. Recent headlines have shown that organisations are not doing enough to ensure the security of people’s personal information. It is not always obvious what measures should be taken by organisations to comply with the legal obligations.

This session examines the law as it relates to data security and the practical steps that organisations need to take to ensure compliance with their obligations. It concentrates on how to avoid a data security breach, as well as what can be done to mitigate the effects of a breach that does occur. The session considers the practical implications of the recommendations of various recent government and other reports on the security of data. Key aspects of this session include:

• analysis of the underlying law including a detailed review of the Seventh Data Protection Principle
• the Information Commissioner’s latest guidance
• data security implications of using external contractors and outsourced service providers 
• examination of the Information Commissioner’s new power to issue Monetary Penalty Notices and other legal and commercial consequences of data security breaches
• managing a data security breach - law and best practice
• relevant information security standards, including ISO27001
• laptop encryption - when it is required
• informing individuals and notifying the Information Commissioner about data security breaches - what is required? 
• confinement strategies to prevent further dissemination of lost or stolen data