Online course GDPR data protection regulation

GDPR data protection regulation with a BONUS course “The protection of personal data in recruitment, employment and termination procedures”

Module 1. Introduction to the General Data Protection Regulation

• Brief background.
• When does the GDPD come into force?
• Objectives.
• Territorial scope.
• To whom does the Regulation apply?
• To whom does the Regulation NOT apply?

Module 2. Personal data

• What is personal data?
• Definition of other important terms in the Regulation.

Module 3. Basic concepts

• Consent of the data subject.
• Consent of children.
• Data protection by design and default.
• Mandatory appointment of a data protection officer in specific cases.
• Data transfer provision of personal data to third parties

Module 4. Principles relating to the processing of personal data

• Legality, fairness and transparency.
• Goal Limitation.
• Data minimization.
• Accuracy.
• Storage limitation.
• Integrity and confidentiality.
• Accountability.

Module 5. More rights for data subjects

• Transparency.
• Right of access.
• Right to rectification.
• Right to erasure (right to be forgotten).
• Right to restriction of processing.
• Right to data portability.
• Right to object.
• The right not to be subject to a decision based solely on automated processing, including profiling.

Module 6. Security of personal data

• Notifying the supervisory authority, the CPDL, of a personal data breach.
• Notification to the data subject of a personal data breach.
• What do you need to do to meet the requirements?

Module 7. Administrative penalties

• Maximum administrative fines for personal data breaches
• What influences the decision on administrative punishment?

Module 8. GDPR and HR

• How to use and store your employees’ personal data.
• GDPR checklist: requirements for HR departments and recruitment agencies.
• Module 9. Practical tips to prepare for GDPR
• Module 10. Frequently asked questions and their answers

Final test

ADDITIONAL INFORMATION:

• Leading news from the Data Protection Commission in the context of Kovid 19 and quarantine
• Newsletter.
• Statement on the processing of personal data in the context of the Covid-19 pandemic.
• Grounds for lawfulness of processing of personal data.

Free download resources

• Notification to the supervisory authority of a personal data breach.
• Notification to the data subject of a personal data breach.
• Sample structure and content of a regulation for the implementation of technical and organisational measures for the protection of personal data.
• Sample structure and content of a data protection impact assessment procedure.
• Sample structure and content of a procedure on the conditions and procedures for consent to processing by data subjects.
• Sample structure of an information security incident management procedure in relation to the protection of personal data.
• Sample structure and content of a procedure on the conditions and procedure for exercising the rights of the personal data subjects.
• Sample structure and content of a privacy policy.
• “Mapping” – analysis of personal data and tracking of processing.

Protection of personal data in recruitment, employment and termination procedures
1. Protection of personal data in the recruitment procedure
1.1. Data that the employer may require in the recruitment process
1) Job application details (CV)
2) Job interview details
1.2. Data that the employer is not entitled to request
1.3. Information the employer must provide to job applicants
1.4. Consent to the processing of personal data and purpose of processing
1.5. Online recruitment (online survey via social networks)
1.6. Processing of data after the recruitment procedure has been completed
2. Protection of personal data in employment
2.1. Privacy Policy
2.2. Data on conclusion of an employment contract and employment record
2.3. Access to personal data
2.4. Data transfer
2.5. Access to information and protection of personal data
2.6. Sensitive personal data
2.7. Access to the Internet and e-mail at work
2.8. Employer’s rights and obligations to monitor company cars
2.9. Methods of observation
3. Termination of employment
3.1. Post-employment data processing
3.2. Transfer of personal data between former and current employer
3.3. Personal data in business e-mail and electronic devices
3.4. Processing of personal data of former employees during an employment tribunal
4. Requests for information relating to the processing of personal data
5. Procedures for employee complaints about improper processing of personal data

Final test