This course is available by: Virtual-LIVE
 

Virtual-LIVE (WEBEX) For those who prefer undertaking LIVE training remotely, PDP’s virtual courses allow delegates to interact directly with the trainer and to participate in group activities, mirroring the typical structure of Classroom sessions.

Breach Management

Course Overview

A personal data breach can have a significant impact on an organisation, including exposure to regulatory fines and claims for compensation. For most organisations, it is now a question of when a breach will occur rather than if. Organisations are legally required to notify a personal data breach to the relevant data protection authority unless the breach is unlikely to negatively impact individuals. Organisations are additionally obligated to inform affected individuals where the breach is likely to result in a high risk to those individuals.

This practical training session looks at the personal data breach obligations in detail and the steps that organisations can take to prepare for and mitigate the risk of a breach. The course covers the following topics:

• the types of incidents that trigger the requirement to notify
• actions that organisations should be taking now in order to prepare for a possible security breach
• incident response plans and opportunities to mitigate risk
• implications for processors
• what the DPC, and other relevant regulators, expect organisations to do
• the requirement for an internal breach register and how to maintain it
• consequences of failing to notify breaches

It is recommended that delegates attending this session have a basic knowledge of data protection legal requirements. Delegates with no existing knowledge may find it helpful to attend Data Protection Essential Knowledge Level 1 before attending this training course.