Why you should take this training?

The training course is designed to provide practical knowledge in the field of personal data protection, present methods for implementing, maintaining and continuously improving the latter and to get participants to know the latest amendment changes effective from May 201 Moreover, participation involves the following:

1. Streamlining the implementation of personal data protection rules in the organisation.
2. Presenting the rules of personal data protection and processing thereof according to the GDPR (European Data Protection Regulation).
3. Presenting the documents necessary to implement the personal data protection policy in the organisation.

Who is it for?

1. Management and executive staff.
2. Employees of personnel and payroll and HR departments.
3. Data protection officers and IT administrators as well as those preparing to take on such posts.

Agenda of the training:

I. Sources of threats to personal data resources:

II. Provisions regarding the protection of personal data:

1. Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR).
2. The Personal Data Protection Act of 10 May 2018 – overview

III. Basic concepts of personal data protection:

1. Personal data
2. Persons authorised to process personal data
3. Data recipient
4. Data processing
5. Personal Data Controller
6. Data Protection Officer
7. Consent to processing of personal data
8. Removal of personal data
9. Pseudonymisation and anonymisation.
10. Data profiling.

IV. Main obligations of the institution as data controller:

1. Recording of personal data processing activities.
2. Reporting instances of personal data protection violation to a supervisory body.
3. Personal data protection impact assessment.
4. Risk estimation.

V. Rules of personal data processing:

1. Lawfulness of personal data processing
2. Information obligation towards the data subject
3. Special restrictions governing the processing of “sensitive” data
4. Special diligence in data processing
5. Sharing personal data with other entities
6. Securing the rights of the data subject
7. Restrictions on transfer of personal data to a third country
8. Entrusting the processing of personal data to an external company (outsourcing).

VI. Methods and forms of securing personal data:

1. Definition of information security
2. Obligations of Personal Data Controller
3. Formal and organisational requirements
4. Technical requirements

VII. Liability for violating data protection provisions:

1. Penal Code
2. Offences against information protection
3. Offences against the credibility of documents
4. Labour Code
5. Unfair Competition Act

VIII. Supervising personal data protection:

1. Office for the Protection of Personal Data
2. Main tasks of the Office
3. Rights of the Office
4. Mode of inspection proceedings