Compliance with data protection rules is not only a matter of risk minimisation. Compliance can:
- Increase customer and employee confidence in the company.
- Enhance brand image.
- Help in the management of company information.
- Act as a reminder to protect company data and company secrets.
- Facilitate future products and services using such data - customer data is a key asset to the company.
- Add to the value of the customer information and the company's value.
Topics covered:
1. Principles relating to the processing of personal data.
2. Lawfulness of processing.
3. Consent.
4. Conditions applicable to child's consent in relation to information society services.
5. Processing of special categories of personal data.
6. Rights of the data subject.
7. Right to be informed.
8. Right of access.
9. Right to rectification.
10. Right to erasure.
11. Right to restriction of processing.
12. Right to data portability.
13. Right to object.
14. Rights related to automated individual decision making including profiling.
15. Controller and processor obligations.
16. Security of personal data.
17. Data protection by design and default.
18. Personal data breach.
19. Data protection impact assessments.
20. Data protection officer.
21. Transfers of personal data to third countries or international organisations.
22. Transfers on the basis of an adequacy decision.
23. Transfers subject to appropriate safeguards.
24. Derogations for specific situations.
About the author
Kieran McLaughlin is a former practising barrister who now works as a data protection and legal consultant.
