Courses take place in:

London, Manchester & Glasgow

All organisations are required to observe the rights of individuals under data protection law. A key objective of the GDPR is to strengthen and extend those rights. Additionally, individuals have a right to claim compensation from both controllers and processors where financial loss or other damage occurs as a result of processing operations which breach the requirements of the GDPR.

This training session looks at the new rights under the GDPR in detail, and also considers the changes to the pre-existing rights, including updates to time limits and new requirements for documentation. The session covers:

• the right to be informed
• requirements for handling subject access requests
• profiling and automated decision taking
• the right to data deletion
• the right to restriction of processing
• the right to object to processing
• the right to data portability
• compensation
• the right to cessation of direct marketing
• exemptions for organisations
• changes that should be made to organisations’ privacy policies

Delegates attending this session must have a basic knowledge of current data protection legal requirements in order to be able to understand the material in this session. Delegates with little no existing knowledge should attend Data Protection Essential Knowledge Level 1 before attending this training course.