Data Protection

This course on Data Protection Skills offers a basic, practical understanding of the law, policy, and practice of data. The Data Protection module sets out essential knowledge relating to data protection concepts and principles, data subject rights, the implementation of data protection policies and measures, and regulatory compliance.

It is more important than ever that the people working with often sensitive personal data have the skills to do so securely and legally. The personal consequences for individuals of a breach of the security of their personal data can be substantial, as can be the legal and commercial consequences for organisations. Skills for data protection are needed for increasing numbers of worker IRES Data Protection course delivers these skills.

1. Legal

• The legal basis of data protection
• The role of Data Processors and Controllers
• Personal data and data subjects
• Special categories of personal data
• Exceptions and derogations
• Data processing
• Data protection principles
• Conditions for lawful processing of data
• Privacy notices and policies
• Retention and destruction of data
• Data security
• Data protection by design and default
• Accountability and governance
• Subject access requests
• Rectification and erasure
• Breaches, fines and enforcement
• Applications in professional roles in big and small organizations
• Case studies and assessments

2. Behavioral

• Potential data security risks for an organisation related to employee behaviour
• Organisational culture and security
• Improving organisational behaviour
• Authentication of system users
• Social media security risks
• Human error
• Compliance, obedience and human motivation
• Personality theory and implications for GDPR
• Characteristics of data breaches
• Case studies

3. Technical

• Key principles
• Internet of things (IoT)
• Cloud computing
• Profiling technologies
• Privacy by design
• Block chain technologies
• Security protocols
• Data protection impact assessment