The General Data Protection Regulation (GDPR) comes into force on 25 May 2018, placing greater accountability on businesses processing the data of EU residents

It supersedes the UK Data Protection Act 1998 and marks a wide-reaching and significant shift in the way that organisations must protect personal data. It grants data subjects several new rights, including the right to judicial remedy against businesses that have infringed their rights. The new Regulation requires organisations to adopt appropriate measures to the risk and implement “technical and organisational measures” to protect personal data.

Compliance is not a choice and time is short

GDPR compliance is not just a matter of ticking a few boxes: the Regulation demands that you demonstrate compliance with the data protection principles. This involves taking a risk-based approach to data protection; having appropriate policies and procedures in place to deal with requirements for transparency, accountability and individuals’ rights; and building a workplace culture of data privacy and security. With the appropriate compliance framework in place, not only will you be able to avoid significant fines and reputational damage, you will also be able to show customers that you are trustworthy and responsible.

Train your in-house resources with Edinburgh-based certified GDPR classroom training

To prepare for the GDPR, it is essential that staff tasked with the compliance project are trained on the Regulation. IT Governance’s ISO 17024-accredited GDPR Foundation and Practitioner training courses offer a structured learning path to equip practitioners, managers and those involved in the compliance project with the specialist knowledge and skills needed to deliver GDPR compliance.

Delegates who attend the one-day EU GDPR Foundation course will gain a comprehensive introduction to the GDPR, and a practical understanding of the implications and legal requirements for organisations.

The four-day Certified EU GDPR Practitioner course builds on the GDPR Foundation qualification to equip participants with the knowledge and operational skills to build, implement and manage a compliance programme under the GDPR. The courseware includes a data protection impact assessment (DPIA) tool to help assess and address privacy risks, and a GDPR compliance gap assessment tool to help prepare a compliance plan.

To date, IT Governance has trained more than 2,500 professionals on the GDPR, and offers GDPR training dates and locations across UK and Europe, as well as in-house. (See table, right, for dates this year.)

IT Governance is a leading global provider of IT governance, risk management and compliance solutions, with a special focus on cyber resilience, data protection, the PCI DSS, ISO 27001 and cyber security. Following the announcement of Scotland’s Cyber Resilience Strategy for the public sector, IT Governance will open an office in Scotland in early 2018. This will be our third office, with offices in Drogheda, Ireland, and the head office in Ely, Cambridgeshire. As we have a strong background in cyber security, we are well positioned to aid the Scottish public sector with the changes required to comply with upcoming cyber security measures and to address the challenges of GDPR compliance

2018 Scotland training schedule

All courses are in Edinburgh

EU GDPR Foundation March 19

EU GDPR Practitioner March 20-23

EU GDPR Foundation April 23

EU GDPR Practitioner April 24-26

EU GDPR Foundation May 21

EU GDPR Practitioner May 22-25

EU GDPR Foundation June 18

EU GDPR Practitioner June 19-22