GDPR – Security Breach Reporting

Personal data breaches are a regular occurrence for many businesses and can lead to enforcement action by the ICO, which may result in a substantial fine.

This session provides a summary of the key rules concerning security, as well as the notification, communication, and record-keeping requirements outlined in the UK GDPR. Delegates will also be asked to participate in an interactive exercise requiring them to address the questions raised by the ICO.

Topics for discussion will include:

General security requirements under the UK GDPR

• Meaning of ‘appropriate technical and organisational measures’
• Meaning of ‘personal data breach’

Notification to the ICO

• Relevant time periods
• Breach reporting questions

Communication to data subjects affected

• Meaning of ‘high risk’
• Exceptions

Enforcement action

• Summary of fines issued to date

Practical steps to take

• Pseudonymisation and encryption
• Multi-factor authentication

Top 3 Facts From the Webinar:

• Understand the general security breach requirements of the UK GDPR
• Be aware of the notification process
• Adapt existing practices to ensure ongoing compliance

Who This Is For:

Lawyers and non-lawyers with an interest in data protection.

Level of Expertise:

All Levels – this can be picked up throughout anyone’s professional career regardless of experience.

CPD Hours:

This live webinar provides you with 1 hour of learning.

Attendees will receive a CPD certificate upon completion of this course.

Learning Objectives

• To understand the key concepts relating to security breach reporting
• To consider how to notify a personal data breach to the ICO
• To comprehend the steps to take to minimise the risk of a personal data breach occurring