General Data Protection Regulation (GDPR) and Privacy Webinars

 Delivered by:

• Dr. Loredana Tassone
• Helen Pettit

Organizations face increasing scrutiny over how they handle personal data. DSARs (data subject access requests) are a critical component of GDPR (General Data Protection Regulation) compliance, allowing individuals to access their personal data held by organizations. In this webinar, our DSAR experts will explore how organizations can effectively navigate the complexities of DSAR compliance and the benefits of outsourcing DSAR management.

We will guide you through the entire DSAR process, from verifying the requester’s identity to formally disclosing information. You will gain practical knowledge and the tools to handle DSARs efficiently while maintaining GDPR compliance and building trust with customers. This is crucial for any organization that values privacy management and seeks to avoid hefty fines and reputational damage.

 Read more

Download now

 Hosted by:

• Andrew Snow, Data Protection and Cyber Security Specialist & Trainer, IT Governance
• Andrew Johnston, Head of Training, IT Governance

Are you ready to step into the dynamic world of privacy management? Our live webinar is your gateway to a rewarding career as a DPO (data protection officer) or privacy lead. Discover how you can become a key player in the ever-evolving field of data protection and cybersecurity.

If you’ve ever considered a career in this exciting field, our webinar is your gateway to understanding what it takes to get started.

 Read more

Download now

 Delivered by:

• Alan Calder
• Dr Loredana Tassone

This webinar will provide a comprehensive understanding of and practical guidance for your Europrivacy™/® certification path.

We will explore Europrivacy’s foundational role in GDPR compliance, and dive into effective preparation for the Europrivacy audit – a critical step on your certification journey.

Discover the benefits of Europrivacy certification, extending beyond compliance, and how our CyberComply platform can streamline your certification efforts.

Join us for this insightful session to learn how Europrivacy certification can benefit your business.  

 Read more

Download now

 Delivered by:

• Alan Calder
• Alice Turley

This webinar covers the essential steps to help you navigate the complexities of data protection and successful Europrivacy™/® compliance.

Organizations with Europrivacy certification can establish trust and confidence among stakeholders, streamline cross-border data transfers, and access valuable online resources and tools.

In the webinar, we delve into GDPR readiness assessments, provide insights on bridging the Europrivacy-GDPR gap for certification, and offer practical solutions to ensure successful Europrivacy compliance.

Download to gain the knowledge to confidently tackle the evolving data protection landscape.  

 Read more

Download now

 Delivered by: Alan Calder

In this webinar, we explore the fundamental principles and advantages of Europrivacy™/® certification – the first certification mechanism to ensure compliance with the EU GDPR (General Data Protection Regulation).

Europrivacy has been acknowledged by the EDPB (European Data Protection Board) as the official European data protection seal. This certification empowers organizations to demonstrate their commitment to the GDPR and related regulations in their data processing activities.

Among other benefits, certified organizations will also join a GDPR-compliant business community, and receive continual compliance updates from top international legal and technology experts.

As an official partner of the ECCP (European Centre for Certification and Privacy), our parent company, GRC International Group, is dedicated to supporting the implementation of Europrivacy-related services.

 Read more

Download now

 Delivered by: Alan Calder

Discover how ISO 27701 can significantly enhance your privacy practices, align with international privacy standards and fortify your overall information security framework.

This 45-minute webinar provides a practical overview of integrating privacy into your existing ISO 27001 information security management system (ISMS) while leveraging the power of ISO 27701 and Europrivacy certification.

Learn how Europrivacy certification, an EDPB-approved certification that demonstrates GDPR compliance, can give an invaluable badge of credibility to US companies offering services into the EU.

This webinar was hosted in partnership with Perry Jonson Registrars, Inc.

 Read more

Download now

 Delivered by: William Gamble, GRC Consultant, IT Governance USA

Governments around the world have been tightening legislation on how organizations collect and share data.

U.S.-based companies operating locally or internationally have a wide set of privacy requirements they need to meet to avoid regulatory fines and minimize the risk of a data breach.

This webinar discusses U.S. privacy laws and how they affect your organization. It aims to provide a brief introduction to these laws, how they are applied in different states, and how your organization can comply with their requirements.

 Read more

Download now

 Presenter: William Gamble

Privacy compliance for Americans is quite complex and will undoubtedly get much more complicated. That’s because the U.S. has a patchwork of data protection laws and regulations that may catch the unwary or the uninformed out, and that come in many different flavors.

Join William Gamble to learn how organizations can navigate through the many different data privacy laws in the U.S. This informative webinar will cover:

• The alphabet soup of privacy laws in the U.S.
• How they compare to Europe
• The similarities and differences between all the various privacy laws
• How we can help

Download now

 Presenter: Alice Turley, GDPR Consultant, IT Governance Europe

ISO 27701 offers a best-practice approach to help organizations implement privacy security controls, expanding on ISO 27001’s clauses and Annex A controls that relate specifically to data privacy, as well as providing two additional sets of controls specific to data controllers and data processors.  

Organizations that have implemented an ISO 27001-compliant ISMS (information security management system) can build on their existing work and address data privacy with ISO 27701. By conducting an ISO 27701 gap analysis, you can prioritize work areas to achieve compliance with the Standard and implement a PIMS (privacy information management system).  

In this webinar, GDPR consultant Alice Turley offers practical advice on conducting an ISO 27701 gap analysis, covering:  

• ISO 27701’s compliance requirements 
• The mandatory documentation to achieve ISO 27701 compliance 
• Questions organizations should ask when conducting a gap analysis  
• Reporting on the results and measuring the closure of gaps  

Download coming soon

 Presenters:

• Camilla Winlo, Director of Consulting Services, DQM GRC
• Preston Bukaty, GDPR Consultant, IT Governance USA

In the wake of complaints from the Austrian privacy activist Max Schrems, who argued that the U.S. government’s mass surveillance practices contradict the protections that the EU–U.S. Privacy Shield was supposed to provide for organizations that make transatlantic personal data transfers, the European Court of Justice ruled that the Privacy Shield is no longer valid.

It also ruled that EU SCCs (standard contractual clauses), also known as model clauses, are valid in principle but not always in practice, depending on the circumstances of those data transfers. This also causes problems for EU-based organizations that intend to transfer personal data to and from the U.S.

 Read more

Download now

 Presenter: Preston Bukaty, IT Governance USA Consultant

The EU’s GDPR (General Data Protection Regulation) has been in force for more than two years, but many North American businesses are still unsure whether they need to comply. Get a high-level understanding of the Regulation and recent developments in data privacy with this insightful webinar which covers:

• Updates on U.S. state and federal laws and how they compare to the GDPR
• Whether you need an EU representative
• The DPO (data protection officer) role
• The Schrems II decision and what your organization should do about it
• What the invalidation of the EU–U.S. Privacy Shield means for organizations

Download now

The webinar covers:

• An overview of the regulatory landscape and the GDPR’s scope
• The main responsibilities and obligations of controllers and processers
• Data breach and incident response management obligations
• The penalties and liabilities imposed on processers and controllers
• The limitations and restrictions on appointing joint controllers and subcontracting processors

Watch now

The EU GDPR (General Data Protection Regulation) has changed the way organizations collect and process personal data. To do business within the European Union, organizations worldwide need to comply with the new law.

The webinar covers:

• Updates on U.S. state and federal laws and how they compare to the EU GDPR
• Do I need an EU representative?
• Is the Privacy Shield enough?
• What does the Privacy Shield mean for companies?

Watch now

Risk management: How organizations can identify the risk associated with the loss of confidentiality, integrity and availability of information

The webinar covers:

• Breach reporting and the recommended best-practice approach to identifying, documenting, and investigating incidents
• How to mitigate risks presented by suppliers that have access to personal data
• Data mapping/data asset inventories and the procedures for acceptable data use, labelling, and handling

Watch now

The webinar covers:

• An overview of the GDPR and how an ISO 27001-aligned ISMS (information security management system) can support compliance
• The benefits of implementing an ISMS
• The top risks that result in data breaches and what to do in the event of a data breach
• The technical and organizational requirements to achieve GDPR compliance

Watch now

The webinar covers:

• Penetration testing and its role in demonstrating compliance
• Implementing technical measures to ensure data security and compliance with Article 32 of the GDPR
• Why penetration tests are vital in uncovering vulnerabilities before criminals do
• How to meet legislative and regulatory requirements, and achieve an integrated approach with standards such as the PCI DSS (Payment Card Industry Data Security Standard) and ISO 27001

Download now

From May 25, 2018 the EU General Data Protection Regulation (GDPR) changes the way organizations collect and process personal data. To do business within the European Union organizations worldwide will need to comply with the new law.

The webinar covers:

• Why organizations need to comply with the GDPR
• The GDPR’s requirements and how this relates to US frameworks and laws
• Data subject rights (DSARs)?
• Breach notifications
• International data transfers

Download now