Filter by Source
Seasons

22. Personal data breach notification
March 1, 2018
Personal data breach questions. What is it? What breaches require notification? When must individuals be notified? What information does the supervisory authority require? How quickly must a data breach be notified? Preparing your organisation for personal data breach reporting.

21. Direct marketing implications
March 1, 2018
GDPR implications from a marketer's perspective. Consent must be given and not be assumed. Explains legitimate interest. Being mindful of other related regulations. Marketers may need to demonstrate how they meet lawful conditions for processing personal data. Failure to prove how consent was obtained risks sanctions and/or fines.

20. Subject access requests (SARs)
March 1, 2018
Considers citizen's access rights, whether a fee can be charged, permitted response timescales, what to do about unfounded or excessive information requests, how to provide the information and what to do about large requests.

19. Applying the GDPR - Introduction
March 1, 2018
The GDPR's introduction presents significant issues for almost every business and organisation. Important GDPR related subjects for most businesses to consider. These applying the GDPR lectures introduce: subject access requests (SARs), direct marketing implications and personal data breach notification.

16. Business impact
March 1, 2018
Business impact of the GDPR regarding data subjects' rights. Review existing systems and personal data processing. Train staff to increase their GDPR awareness. Update privacy policies and notices. Ask existing contacts if they're happy with how your organisation processes their personal data?

15. Data subjects' rights
March 1, 2018
Introduces new and clearer individual data subjects' rights under the GDPR. Breaching these rights risks the higher tier of fines. Data subjects can sue if their rights are violated. Individual rights are: 1 - to be informed. 2 - of access. 3 - rectification. 4 - erasure. 5 - to restrict processing. 6 - data portability. 7 - to object. 8 - automated decision-making and profiling.

14. Individual rights - Introduction
March 1, 2018
The GDPR greatly extends people's individual rights, so organisations need to prepare. Outlines data subjects' rights and considers the business impact of serving those rights. Organisations ought to implement GDPR compliance measures, otherwise they may face an investigation and could suffer adverse consequences.

13. Summary and conclusions
March 1, 2018
These principles and accountability lectures introduced the six GDPR data protection and accountability principles. An organisation must comply with the principles and be able to demonstrate compliance. Compliance will challenge almost all organisations, regardless of size. Additionally, organisations need to demonstrate that they're proactive and responsive to data protection concerns.

11. Accountability principle
March 1, 2018
The GDPR introduces a new overarching principle - accountability. This requires organisations adopt a proactive, systematic and answerable attitude towards data protection compliance. It's not enough to merely comply with the GDPR's data protection principles. Organisation's must also be able to demonstrate compliance to the supervisory authority and to individuals.

10. Data protection principles
March 1, 2018
The six GDPR data protection principles. Collectively, these principles set out the main compliance responsibilities. They are: 1 - Lawful, fair and transparent. 2 - Specified, explicit, legitimate purposes. 3 - Adequate, relevant and limited. 4 - Accurate and up to date. 5 - For no longer than is necessary. 6 - Handled securely. Examples of fines levied under prior regulation.

9. Principles and accountability - Introduction
March 1, 2018
Principles and accountability introduces the six data protection principles and accountability principle underpinning the GPDR. Failure to comply with these principles can lead organisations to serious consequences.

7. Practical implications
March 1, 2018
Why does this matter? Because it's the law! The GDPR's 'extra-territorial' scope gives it global reach. Businesses within and outside of the EU offering goods or services to, or processing an EU citizen's personal data, must comply. Businesses failing to comply, face hugely increased sanctions, penalties and fines. They also risk being sued by data subjects directly for damages suffered.

6. Exemptions
March 1, 2018
Are small businesses exempt from the GDPR? What are the general exemptions? Outlines proposed UK derogations. Offers a view on the GDPR and Brexit.

5. Increased penalties
March 1, 2018
Overall, the GDPR introduces a much tougher regulatory regime. Yet, increased fines aren't the biggest data protection threat facing an organisation. True, the GDPR introduces much bigger fines. Potential non-compliance penalties, depending on the nature, gravity and duration of an infringement are now eye-wateringly significant.

4. Key roles and definitions
March 1, 2018
Introduces key GDPR roles and defines personal data. Defines standard data protection terminology used throughout the rest of the course.

3. Background
March 1, 2018
Why is data protection regulation necessary? What are the key data protection concerns? Explains the GDPR's purpose, how the GDPR works, changes from prior data protection regulation and outlines the GDPR's headline features.

2. GDPR - Rationale and overview - Introduction
March 1, 2018
Almost every organisation processes personal information. People face real dangers if personal information gets into the wrong hands. Introduces the GDPR, its background, outlines key roles and definitions, increased penalties and exemptions. The GDPR affects any organisation processing an EU citizen's personal information. Failure to comply could lead to significant sanctions or fines.

1. Course Introduction
March 1, 2018
'GDPR - in a nutshell' introduces the GDPR and its data protection principles. It gives an insight into common compliance challenges, especially those facing smaller organisations. Course topics: 1 - GDPR rationale and overview, i.e. the big picture. 2 - Data protection principles and accountability. 3 - New and enhanced individual rights. 4 - Issues faced when applying the GDPR.
Description
Where to Watch GDPR - in a nutshell
GDPR - in a nutshell is available for streaming on the CHL website, both individual episodes and full seasons. You can also watch GDPR - in a nutshell on demand at Amazon.
-
CastDavid Chapman
-
Channel
-
Premiere DateMarch 1, 2018