Data Protection in Practice: Applying the GDPR Safely

Data Protection as an Organizational Responsibility: Context and Objectives

• Data Protection as Part of Corporate Governance.
• Structure and Objectives of a Data Protection Management System.
• Involvement of management and functional departments.
• Establishing a sustainable culture of data protection.

Accountability and a Risk-Based Approach

• Importance of the Obligation to Provide Evidence and Documentation.
• Risk assessment as the basis for all measures.
• Development of appropriate protective measures.
• Managing Residual Risks and Documenting Decisions.

Interaction Between VVT, DSFA, and TOMs

• VVT as the starting point for data protection management.
• Identification of high-risk processing operations.
• Conducting and documenting DSFAs.
• Development and review of technical and organizational measures.

Role Models and Responsibilities

• Distinction Between Data Controllers, Data Processors, and Joint Controllers.
• Role of Management.
• Role and Responsibilities of Data Protection Officers.
• Collaboration between IT, business units, and data protection.

Typical Practical Questions from Organizations

• Deletion Strategies and Legacy Data.
• Cloud and service provider deployment.
• Data Protection in Everyday Work.
• Rights of People with Disabilities in Practice.
• Handling Data Breaches.

Regulatory Authorities' Expectations

• Audit Focus and Common Issues.
• Requirements for documentation and record-keeping.
• How to Respond in the Event of an Inspection or Audit.

Real-World Cases and Joint Analysis

• Analysis of real-world processing situations.
• Risk Assessment and DSFA Decision.
• Derivation of appropriate TOMs.
• Joint evaluation of potential solutions.