Data Protection Training in Bhutan

Purpose of the Training

• Gaining practical knowledge on how to perform the tasks of the Inspector
• Gaining practical knowledge of how to audit and how to assess risk
• Providing practical knowledge about the new rules for the processing of personal data

Purpose of the Training

• Acquainting the audience with systematized, comprehensive issues of the functioning of personal data protection on the basis of Polish and European law
• Providing practical knowledge about the new rules for the processing of personal data
• Presentation of the areas of the greatest legal risks in connection with the entry into force of the GDPR
• Practical preparation for independent performance of the duties of a Personal Data Protection Officer

There is a need to provide adequate training on the Data Protection Act 1998 "the Act" and its implications for both organisations and individuals. There are important differences between the Act and its predecessor, the Data Protection Act 1984. In particular, the Act contains important new obligations in relation to manual records and transborder data flows, a new notification system and amended principles. It is important to understand the Act in the European context. Those experienced in data protection issues, as well as those new to the subject, need to be trained so that their organisations are confident that legal compliance is continually addressed. It is necessary to identify issues requiring expert data protection advice in good time in order that organisational reputation and credibility are enhanced through relevant data protection policies and procedures. Objectives The aim of the syllabus is to promote an understanding of how the data protection principles work rather than simply focusing on the mechanics of regulation. The syllabus places the Act in the context of human rights and promotes good practice within organisations. On attaining the certificate, award holders will possess:

• appreciation of the broader context of the Act
• understanding of the way in which the Act and the Privacy and Electronic Communications (EC Directive) Regulations 2003 work a broad understanding of the way associated legislation relates to the Act an understanding of what has to be done to achieve compliance a recognised qualification in data protection

Course Synopsis The syllabus comprises three main parts, each with many sub-sections! Context - this will address the origins of and reasons for the Act together with consideration of privacy in general. Law – Data Protection Act - this will address the main concepts and elements of the Act and subordinate legislation. Application - this will consider how compliance is achieved and how the Act works in practice.

This is an Instructor led course, and is the non-certification version of the "CDP - Certificate in Data Protection" course Those experienced in data protection issues, as well as those new to the subject, need to be trained so that their organisations are confident that legal compliance is continually addressed. It is necessary to identify issues requiring expert data protection advice in good time in order that organisational reputation and credibility are enhanced through relevant data protection policies and procedures. Objectives: The aim of the syllabus is to promote an understanding of how the data protection principles work rather than simply focusing on the mechanics of regulation. The syllabus places the Act in the context of human rights and promotes good practice within organisations. On completion, you will have:

• an appreciation of the broader context of the Act.
• an understanding of the way in which the Act and the Privacy and Electronic Communications (EC Directive) Regulations 2003 work
• a broad understanding of the way associated legislation relates to the Act
• an understanding of what has to be done to achieve compliance

Course Synopsis: The syllabus comprises three main parts, each sub-sections.

• Context - this will address the origins of and reasons for the Act together with consideration of privacy in general.
• Law – Data Protection Act - this will address the main concepts and elements of the Act and subordinate legislation.
• Application - this will consider how compliance is achieved and how the Act works in practice.

This one-day course is for people looking for a brief outline of the GDPR – General Data Protection Regulations coming out May 25, 2018. This is ideal for managers, department heads, and employees who need to understand the basics of the GDPR.

This course is developed primarily with focus on auditors and other administrative roles who are
tasked to ensure compliance of their control systems and IT environment with prevailing laws and
regulations. The course will begin by giving understanding of key GDPR concepts as well as how it is
going to affect the work performed by auditors. Participants will also explore data subjects rights,
data controllers and processors obligations, and enforcement and compliance notions in the
context of the Regulation. The training will also cover the audit program provided by ISACA that will
enable auditors to review GDPR governance and response mechanisms as well as supporting
processes which can help manage the risk associated with noncompliance.

This is more in-depth and would be for those working a great deal with the GDPR and who may be appointed to the GDPR team. This would be ideal for IT, human resources and marketing employees, and they will deal extensively with the GDPR.