Having responsibility for training staff on data protection issues can be a daunting prospect. Yet it is essential that all staff who handle personal information understand the fundamental principles and the practical requirements for complying with data protection rules. It is also important that staff members are able to identify breaches or potential breaches of data protection law, and to react appropriately.
Practical and non-technical, this training session gives an insight into suitable training methods and assessing knowledge levels amongst different categories of staff. It will also consider the key issues in planning for and preparing a staff training session, including:
- who should be trained, and what do they need to know?
- appropriate training tools for different groups of staff
- putting together slides, exercises, case studies, and taking examples from “real life”
- session length and timings
- getting the audience on-side and keeping them engaged
- assessment and follow-up
The session will look at how to train staff to:
- appreciate who and what is covered by data protection rules
- understand the organisation’s policy and aims on personal data use
- understand their individual responsibilities
- know and apply the 8 core Principles for personal data use
- understand the additional measures required for sensitive data use
- recognise when, and for what purposes, staff/customer data may be used
- identify appropriate steps to help keep personal information secure
- deal with external requests for information, and understand the safeguards to apply
- understand the rights of individuals and third parties
- recognise and deal with a subject access request
- know what to do in the event of a data protection breach
“Excellent trainer. Venue was great.”