GDPR - training!

[Fekko]

Does anyone know of and decent courses to get to grips with this? I've read up on it but still have questions.

I got something in the post this week inviting me to take an accredited GDPR qualification - some sort of certificate.

I googled it, there are lots of firms offering GDPR certificates. This is very interesting reading.

There is no such thing as GDPR certification/accreditation!

It's good that you find it interesting daisychain :)

When I say interesting times, take it to mean "fraught with insecurity and chaos" from the old English curse "May you live in interesting times..."

If you can get on a DMA course, they are very good - with them being so involved

Hi all, data protection person here too, stressing over GDPR

BCS is developing GDPR practitioner certificates that I think are to be launched next month. If you already hold the data protection practitioner cert, you can do an upgrade to the GDPR one, which is great.

Beware the snake oil salesmen! If you are on Twitter some good people to follow are:

@foikid
@tim2040
@missIG_geek
@bainesy1969
@privacymatters
@actnowtraining
@freevacyltd

:) daisy. I'll grant you that kind of "interesting".....

Second those suggested Twitter handles. Is that what they’re called, “handles”?

I have found my people :)

Lurve the idea of some form of GDPR certification, Fedup definitely looking that up on the BCS website.

My LM has asked me whether I want to join the GDPR project for the company so this might help me from shrieking and running for the hills at the thought

I love you all. This is the thread for me! Data heavy industry here with plenty to do...

I've done the privacy notice. That's one thing out of 2.5 million tasks.

Hi, this is an interesting subject and Daisy, I'm afraid GDPR will not be an aspirational goal. It will be mandated, it is law, and though we may all have got away with all sorts of things in the past, that's no longer likely now - the enforcement powers at the ICO are considerably greater than they've ever been, consumers are more aware than they've ever been, and the media is all over it like a rash. The real worry, in reality, is those companies who have never bothered to comply with the current law. For them, GDPR will be a huge hurdle. For those who do comply with the DPA, there are a few more obligations, but they're well on their way and really shouldn't be panicking (though they should be getting ready). Re courses - we have an engaging course here: store.datacompliant.co.uk/product?catalog=GDPR-in-Practice which uses gaming tech, role-play and quizzes etc to make what can be a rather dry subject fun and interesting.

There is a free online course starting on Futurelearn on 13th November. You can pay to upgrade if you need a certificate.

I have registered and will take a view on whether it's worth upgrading once the course has started.

www.futurelearn.com/courses/general-data-protection-regulation/1/welcome

I found out today this is my 'problem' (normally work in finance) - will be watching this with interest.

Those of you who have been lumped with GDPR compliance, which disciplines do you hail from - HR, Marketing, IT, Compliance?

The BSC course is excellent - I did the data protection one and will be upgrading. Fantastic tutors and great exam tips too :)

Those of you who have been lumped with GDPR compliance, which disciplines do you hail from - HR, Marketing, IT, Compliance?

There have been general info sessions for everyone, with a promise of more specialised sessions to come, according to your focus. Legal have apparently been looking at all our contracts (we are global), and as far as I can tell, it's mostly tightening up things we'be been doing anyway. I'm in IT.

I have to 'deal with this' for work too. Joining thread!

I think this is one of those 'how do you eat an elephant' type of projects. One chunk at a time and very slowly.

I'm in education with responsibility for six schools. I'm quite interested in online training so thank you for the links.

I went on a reasonably good course yesterday if you like watching white middle aged men speak The one woman speaker was fantastic and she has basically written my action plan for me. I am a bit of a geek because I quite want to get everything tidied up and organised and I think this is going to be a lever for some of our efficiency work.

EBearhug, it is legal/compliance that is leading the GDPR effort at my organisation too. Sadly I am from that department, hence I am curious how other organisations structure and resource the compliance effort.

IT, particularly information security, is indeed one of the key areas. Many of the contracts are for IT solutions which increasingly are externally hosted on a cloud. Mapping out where the information assets are located, our vendors and the data flows is a pretty big exercise.

The organisation I work for is US-based and the difference in culture and awareness of data privacy between the US and EU is quite a challenge, and the fact that many of the systems will be hosted in the US.

I am in finance (director) - but, being a small company, anything remotely 'admin' tends to fall to me - hurray..

I as told that data consisting of a person's name and employer was not 'personal' as such - it isn't related to the individual employee.

Hoping that proves to be the case, or else all our marketing is buggered.

We don't deal with consumers directly

Thanks for this. Its made me get my head out of my arse!

Hate to say it but much of GDPR is not new. If you have a dodgy marketing database it was probably dodgy under the (soon to be ex) DPA and PECR.
Not hugely helpful, I know.
Take a look at what the ICO says about current legislation, work out how that works in your set up and try to follow it.
It’s not scary if you are already OK.

Topcat - not convinced. Depends how you keep it and use it. Assuming it is held electronically. If I , as an employee, asked what you had on me, very much doubt you could say it wasn’t personal data.