Learning objectives

This course covers seven modules, and consists of but is not limited to the following topics:

• Why the new data protection law has been introduced
• The key differences between the previous data protection regime and the new one
• The primary aims of the new data protection regulation
• Who the legislation applies to
• What rights people have over the processing of their data
• The grounds for the exercising of these rights
• What information you need to give a data subject
• How and when that information needs to be conveyed
• The definition of consent and how to ask for it
• The penalties for getting consent wrong
• When and when not to use consent
• The other legal ways to process data
• Why organisations choose consent over the legal methods
• What the accountability principle is
• Why it came about and why it is important
• How to achieve compliance with the accountability principle
• What to include in a data map
• What information must be provided in a privacy policy
• When this information should be provided
• The importance of considering audience
• How to comply with the requirement for concision
• The importance of gauging people’s reasonable expectations of what might be done with their data
• The three most relevant lawful grounds that HR need to know about when processing personal data
• The issues around obtaining consent from employees
• Why legitimate interests need careful consideration
• What HR should do if they are unsure if legitimate interests apply
• Workplace monitoring and automated decision-making
• The five HR policies that must be reviewed and updated, and
• What must be included in your privacy policy
• The new and enhanced rights for employees
• The new rules around subject access requests
• Data processing in the context of recruitment
• Processing special category data, criminal convictions, and offences
• DBS checks
• When to notify the ICO of a data breach
• The incentives to ‘pseudonymise’ personal data, and
• The importance of HR working closely with the company’s data protection experts

Entry requirements

There are no entry requirements.

Course assessment and certification

On successful completion of the final assessment a downloadable certificate is immediately available from your Online Training Academy Dashboard