GDPR: The Big Picture

GDPR: The Big Picture

English | MP4 | AVC 1280×720 | AAC 44KHz 2ch | 3h 07m | 328 MB

The EU’s General Data Protection Regulation will affect the way IT teams everywhere design, develop, deploy, and run systems. This course will give you a clear understanding of GDPR and what IT teams need to do to support organizational compliance.

In this course, GDPR: The Big Picture, you’ll discover which organizations must comply with the EU’s General Data Protection Regulation and how GDPR will affect all IT teams. First, you’ll start by meeting the key terms used in the GDPR and seeing how the regulation aims to balance the things that an organization wants to do with personal data with people’s rights, including their right to privacy. Next, you’ll find out the key data protection principles and what they mean for systems, before discovering the specific rights that people have over data about them, and what IT must do to respond to those rights. After that, you’ll learn about the core things that GDPR requires an organization to do, including the way it wants you to manage the security of people’s data and what to do when the organization has a breach of data security. Finally, you’ll think about the application of GDPR by discovering an organizational journey from the beginning of the process to GDPR compliance and by exploring how GDPR affects a typical application development project. By the end of this course, you’ll have the core GDPR knowledge that anyone working in IT needs to understand. You’ll be able to take account of GDPR when working in projects across the IT lifecycle from design and development through deployment to running systems. You’ll also be comfortable discussing GDPR with your organization’s legal, compliance and governance teams.

Table of Contents

Course Overview
1 Course Overview

Introduction to GDPR
2 The Who What When Why and Where of GDPR
3 Module Summary

Key Data Protection Concepts and Principles
4 Balancing People s Rights
5 What Is Personal Data
6 Data Subjects Controller and Processors
7 The Anatomy of GDPR
8 All Processing Must Be Lawful
9 The Core Data Protection Principles
10 Putting the Principles into Practice
11 Module Summary

Data Subject Rights
12 Rights in the Information Lifecycle
13 Rights to Be Informed About What Will Happen to a Person s Data
14 Right of Data Subjects to Access Their Data DSARs
15 Rights of Correction and Erasure Forgotten
16 Right to Restrict Processing
17 Right to Data Portability
18 Marketing Profiling and Automated Decision Making
19 Summary of Subject Rights
20 Penalties and Planning for Rights Requests

Controller and Processor Responsibilities
21 Data Protection by Default Governance and Accountability
22 Data Protection Impact Assessments DPIA
23 Data Processors
24 Security and Breach Notification
25 The Data Protection Officer DPO
26 Taking Data Outside of the EU
27 Penalties and Consequences

Security Risk and Impact Assessments
28 The Risk to Data Subjects
29 Determining What s Appropriate
30 Encryption and Control Assurance
31 The Breach Response Timetable
32 Module Summary

What s a GDPR Program Look Like
33 Governance Finding Data and Deleting Unnecessary Data
34 Understanding the Current State and Assessing Risks
35 Risk Prioritization and Remediation
36 In-flight Projects Preparing for Breaches and Keeping Records
37 Module Summary

Integrating GDPR into IT
38 Introducing the Case Study Fair and Lawful Processing
39 Technical Principles and Respecting Rights
40 The Key Obligations for the Controller
41 GDPR in the IT Lifecycle

Five GDPR Common Myths
42 Consent Citizens PII Data Deletion and Extreme Fines
43 The Big Picture