Training Personal Data Protection in Practice – RODO

The training provides a comprehensive knowledge of personal data protection and the practical aspects of implementing RODO in an organization. The program combines elements of theoretical lectures with intensive practical workshops, during which participants will gain the skills necessary to effectively manage personal data processing processes. Classes are conducted with the use of the case study method and interactive group exercises, which allows for effective assimilation of knowledge and its application in everyday work.

• Data Protection Officers (DPOs).
• People responsible for information security in the organization
• Employees of legal and compliance departments
• IT security specialists
• Managers and decision makers in organizations that process personal data
• Information systems administrators
• HR and marketing employees
• Individuals preparing for the role of IOD

1. Introduction

• Training Objective: To familiarize participants with the key principles of data protection
• Practical aspects of implementing RODO in an organization
• Presentation of the training program and methodology
• Participants’ expectations and individual training needs

2. RODO basics

• Genesis and objectives of the regulation: history, needs for implementation, and main goals of RODO
• PUODO recommendations and interpretations and their practical significance
• Definitions and key terms: personal data, data subject, controller and processor
• Consent to data processing, pseudonymization and anonymization of information

3. Principles of personal data processing

• Legality, reliability and transparency: a discussion of the legal basis for data processing
• Target reduction and data minimization: practical implementation
• Correctness and limitation of storage: data lifecycle management
• Accountability principle: how to document compliance with RODO

4. Rights of data subjects

• Data access and rectification: procedures and deadlines for implementation
• Deletion of data (right to be forgotten): technical and organizational challenges
• Data portability: format and how to exercise the right
• Right to restrict processing and object: responding to requests

5. Responsibilities of the controller and processor

• Records management: records of processing activities
• Internal policies and procedures for data protection
• Processing entrustment agreements: key elements and responsibilities of the parties
• Data protection impact assessment (DPIA): methodology and examples

6. Risk analysis

• Threat identification: methods for detecting potential threats to data
• Risk assessment: techniques for evaluating the likelihood and impact of hazards
• Planning countermeasures: strategies to minimize risks
• Practical examples: workshops on conducting risk analysis

7. Security of personal data

• Technical measures to secure data: encryption, pseudonymization, access control
• Organizational measures: training, security policies, privilege management
• Incident management: breach response procedures
• Notification obligations: communication with PUODO and data subjects

8. Practical module – implementation of RODO

• Mapping the organization’s data processing processes
• Create and update data protection documentation
• Conduct risk analysis and DPIA
• Implementation of procedures to realize the rights of data subjects

9. Workshops and case studies

• Analysis of data breaches and lessons learned
• Examples of proper implementation of RODO in various industries
• Group exercise: simulation of a security incident
• Develop strategies for responding to reports from data subjects

10. Question and answer session

• Discussion and exchange of participants’ experiences
• Clarification of individual concerns
• Analysis of specific cases reported by participants
• Summary of key findings and practical tips

• Practical knowledge of interpreting and applying the provisions of RODO in everyday work
• Ability to identify and categorize personal data in the organization
• Methods for conducting data processing risk analysis
• Knowledge of creating and managing the documentation required by RODO
• Ability to respond to requests from data subjects
• Procedures for reporting and managing data breach incidents
• Principles of designing processes in accordance with the concept of privacy by design
• Practical tools to implement and maintain RODO compliance

• Basic knowledge of legal issues related to business operations
• General knowledge about data protection and privacy
• Understand the basic concepts of information security
• Experience working with personal data in an organization
• Knowledge of your organization’s business processes

• Legal grounds for processing personal data
• Consent for data processing: acquisition and management
• Data retention and information lifecycle management
• Register of data processing activities
• Data Protection Impact Assessment (DPIA)
• Risk analysis in personal data protection
• Rights of data subjects
• Responsibilities of the data controller and processors
• Privacy by design and privacy by default
• Reporting of data protection violations
• The role and tasks of the Data Protection Officer
• Cooperation with the supervisory authority (PUODO)