The basics of data privacy

Rights of the data subjects (Art. 12-21 GDPR)

• An overview of the rights of data subjects under the General Data Protection Regulation and their practical implementation in the company.

General obligations of companies (Art. 24-39 GDPR)

• The central obligations for companies, from the creation of an order processing contract to cooperation with the supervisory authority.

Verification and accountability obligations

• Presentation of the requirements for the internal data protection management system and their significance for legally compliant implementation.

What is really needed?

• A practical guide to assessing the relevant requirements and avoiding unnecessary measures.

Data security objectives and relevant practical examples (Art. 32 GDPR)

• An overview of the objectives of data security in accordance with Art. 32 GDPR, supplemented by practical examples of technical and organizational measures that ensure the protection of data in the company.

Data breaches and resulting obligations (Art. 33/34 GDPR)

• Definition of data breaches, their potential impact and the legal obligations arising from them, how they were reported to the supervisory authorities or how data subjects were notified.

Privacy by design and privacy by default (Art. 25 GDPR)

• Requirements for the selection and introduction of new IT systems and processes, with a particular focus on data protection-friendly default settings and design approaches. Practical examples, such as the introduction of video conferencing tools, illustrate the implementation.

Liability risks and protection of communication

• Identification of liability risks in connection with the introduction of new technologies and processes. It also shows how secure protection of communication within and outside the company can be guaranteed.