Course Description
Employees working in UK commercial and third sector companies of any size need to be aware of the legal requirements for Data Protection and Privacy. It is important for employees to be aware of the context of their role and the roles of others in complying with Privacy Law. This course provides awareness of the law, the principles of data protection and the critically important aspects of privacy management that will benefit the company, its employees and its customers.
Regulatory requirements include regular training of employees and whilst this course achieves that, there is added value content, intended to enhance the students’ knowledge to positively contribute to improved company performance.
Who is the course for?
The course can be taken by any employee, particularly information workers and those who access or process personal information. The course is aimed at micro and small organisations that have minimal personal data processing activities and which could be considered low risk because they:
- Do not process sensitive or special category personal data
- Do not store or use systems that process data outside of the UK
- Do not share or transfer data to organisations outside of the UK
- Do not perform profiling or automated decision making
An example may be a small business that only processes employee data and maintains a simple operations or customer management system for UK based customers with basic customer contact and order-related data.
This particular course is not intended for senior managers responsible for implementing privacy/data protection management systems or role-specific process owners or system administrators. For example, there are separate role-specific courses intended for roles such as Executive, senior managers, HR, IT, Sales and Marketing process and system owners where there will benefit from more detailed and role-specific training.
This course/assessment is not intended for the public sector or government organisations where special rules apply.
What training prerequisites are there for taking the course?
There are no training prerequisites. The training is best used when the organisation has established basic policies with regard to data protection.
What level of knowledge is required?
No specific specialist knowledge is required. It is assumed that all employees have undertaken a company induction as it would be advantageous for the student to be aware of the location of and have access to company specific policies, processes and procedures.
What knowledge will be gained after taking the course?
- Awareness and a general understanding of the principles of Privacy and Data Protection
- Awareness of the UK / EU legal requirements
- Awareness of information security relating to Privacy and Data Protection
- Awareness of general employee responsibilities
- Awareness of data subject rights and requests
- Awareness of incident management and record-keeping requirements
- Awareness of requirements for mobile/home working
- Awareness of requirements relating to information access control, sharing information and transfer of information (eg external and 3rd parties)
