What you’ll learn:
Module 1: Understanding personal data and data breaches ;
Module 2: How to prevent a data breach in my startup ;
Module 3: Understanding the obligations of data controllers and processors in the event of a personal data breach;
Module 4: Understanding the sanctions applicable in the event of a breach of your startup’s personal data.
Prerequisites :
- collect, store or manage personal data in the course of its business.
Description :
Data security is an extremely important issue that has an impact on relations with your customers, partners and service providers.
From a regulatory point of view, if your startup processes personal data in Europe, the RGPD requires you to implement security measures and in the event of a breach to comply with certain obligations, particularly in terms of notification. Furthermore, your obligations will differ depending on whether you are a subcontractor or a data controller.
This training course explains how to meet your obligations in the event of a personal data breach.
Data security is an extremely important issue that has an impact on relations with your customers, partners and service providers.
From a regulatory point of view, if your startup processes personal data in Europe, the RGPD requires you to implement security measures and in the event of a breach to comply with certain obligations, particularly in terms of notification. Furthermore, your obligations will differ depending on whether you are a subcontractor or a data controller.
This training course explains how to meet your obligations in the event of a personal data breach.
Want to understand what a personal data breach under the RGPD is?
Would you like to know what your obligations are as a data controller or processor in the event of a personal data breach?
→ Then this course is for you.
You’ll learn what a data breach is, how to prevent a breach of your startup’s personal data, how to react in the event of a personal data breach, and what penalties apply.
When the startup acts as a Data Controller, it is recommended to :
- firstly, implement an internal policy for managing personal data breaches, so as to have an internal process enabling us to detect and act very quickly in the event of a data breach;
- in the event of data breaches, complete an initial notification to the CNIL, which will be supplemented “as soon as possible” by an additional notification, and notify the persons concerned.
When the startup acts as a Subcontractor, it is recommended not to carry out any notification to the supervisory authority or communication to data subjects on behalf of the Data Controller. The RGPD does not impose these obligations on the startup acting as a Subcontractor.
👉 Module 1: Preliminary definitions
- what is personal data ;
- what is a personal data breach ;
👉 Module 2: How to prevent personal data breaches
- implement safety measures ;
- raise employee awareness;
- compile the required documentation ;
- Focus: the personal data breach management policy.
👉 Module 3: How to manage a personal data breach
- obligations as a data controller ;
- obligations as a subcontractor ;
👉 Module 4: Sanctions applicable in the event of a personal data breach