Popular ISO 9001 Quality management > ISO 13485 Quality management for medical devices > ISO 14001 Environmental management > ISO 22301 Business continuity > ISO/IEC 27001 Information security > ISO 45001 (OHSAS 18001) Occupational health and safety > View all standards >
Access and buy standards How to access and buy > Decide which option works best for your business BSOL > Full standards collections Compliance Navigatior > Medical device standards
Standards and information Access and buy standards > Search our standards catalogue Develop a standard > Work with BSI to develop a standard Online subscription services > BSOL, Compliance Navigator, Eurocodes PLUS, BSI Membership and SCREEN
Auditing, certification and training Assessment and ISO certification > ISO certification and others eg: IATF, FSSC Auditing and verification > Supplier audits, custom audits and internal audits Product testing and certification > BSI Kitemark, CE marking and verification, Market access solutions Validate BSI-issued certificates > Check company, site and product certificates
Training courses > Individual, group and company-wide training Medical devices services > CE marking for medical devices, MDR and IVDR, quality management for medical devices Compliance software and solutions > Software tools and solutions for governance, cyber security, risk and supply chain management
Consulting practices Cybersecurity and information resilience > Environmental health and safety > Supply chain management > View all BSI services >
About BSI > BSI impartiality > Our accreditation > Our clients and partners > Our financial information >
Our governance > Our legal information > Our purpose, mission and vision > Our Royal Charter > UK National Standards body > The global role of BSI as the national standards body >
Careers > Events and webinars > Media centre/press room > Sustainability > Modern slavery statement Contact us >
Data protection (GDPR) > Penetration testing > Vulnerability assessment > PCI DSS consultancy > ISO 27001 consultancy > IT audit and assessment > Incident response > View all our services >
End user security awareness > eDiscovery/eDisclosure and digital forensics > Critical infrastructure security > Security testing cyber lab >
Cloud security > Managed security > Secure web gateway > Cloud encryption > Vulnerability management > SIEM solutions > Identity and access management > Cloud access security broker (CASB) > View all our solutions >
Information compliance training > Technical security training > Managerial security training > eDiscovery training > View all our cybersecurity training courses >
Fundamentals of GDPR > Certified Information Privacy Professional Europe (CIPP/E) > Certified Information Privacy Manager (CIPM) > Certified Information Privacy Technologist (CIPT) >
Certified Ethical Hacker (CEH) > Certified Information Security Manager (CISM) > Certified Information Systems Auditor (CISA) > Certified Information Systems Security Professional (CISSP) >
Certified EU General Data Protection Regulation (GDPR) Foundation training course Our one-day foundation training course to the General Data Protection Regulation (GDPR) will help you understand how it could apply to your organization and the potential benefits. By attending this course you will be better prepared to carry out a discussion around the new regulation, conform to the parameters, as well as understand the background, updated concepts, principles, terms and definitions used in the new GDPR. This foundation course will also help you understand how the regulation works, so you can prepare and work towards compliance for the new regulation that comes into force on 25 May 2018. Plus you’ll be in a position to start a scoping exercise that can then lead to a gap analysis, privacy impact and risk assessment or a full data protection audit. Who should attend? Managers seeking to broaden their knowledge of the GDPR requirements, or those who currently have a role in data protection or information security and need to understand how to comply with the regulation Individuals with little experience in privacy or data protection but who wish to enter the field having had some exposure to the regulation through training Individuals who need to understand their responsibilities, from any business area that processes personal information or data including: legal, corporate governance, risk and compliance, management systems, data security, IT services, marketing, financial and accounting and Human Resources. Suggested job roles and their teams include: Information security managers Data protection officers IT and corporate security managers Corporate governance managers Risk and compliance managers Human Resource managers Financial and Accounts managers Internal legal teams Personal data and records administration teams What will I learn? The fundamentals of the EU GDPR, what is required and terminology Key differences between the Data Protection Acts of old and the EU GDPR Data subjects, subject access requests and their rights Dealing with subject access requests Marketing requirements and potential changes to targeting customers The implementation path to EU GDPR compliance: Privacy by design Data protection impact assessments (DPIA) Data audits Training and competence requirements Incident response and breach reporting Updating policies and procedures International data transfers Replacing Safe Harbor, the Privacy Shield and the new requirements. How will I benefit? Be recognized as a knowledgeable profession on the topic and fundamentals of the new regulation Gain the confidence to interpret data protection regulations and ensure best practice around the compliance of GDPR Greater ability to identify potential impacts of privacy on IT products and services at the beginning of their lifecycle What's included? Refreshments Lunch Course Notes / Material Certificate of attendance