Courses take place in:

London

Organisations are legally required to notify a personal data breach to the national data protection authority unless the breach is unlikely to negatively impact individuals. Organisations are additionally obligated to inform affected, and potentially affected, individuals where the breach is likely to result in a high risk for the rights and freedoms of those individuals.

This practical training session looks at the new breach notification obligations in detail, including:

• the types of incidents that trigger the requirement to notify
• actions that organisations should be taking now in order to prepare for a possible security breach
• incident response plans and opportunities to mitigate risk
• implications for processors
• what the ICO, and other relevant regulators, expect organisations to do
• the requirement for an internal breach register and how to maintain it
• consequences of failing to notify breaches

It is recommended that delegates attending this session have a basic knowledge of data protection legal requirements. Delegates with no existing knowledge may find it helpful to attend Data Protection Essential Knowledge Level 1 before attending this training course.