Managing Personal Data Breaches - Act Now

Under the General Data Protection Regulation (GDPR) Data Controllers have a duty to record and, in some cases, report personal data breaches to the Information Commissioner as well as Data Subjects.

In addition, there are a range of other statutory and regulatory duties for recording, reporting and responding to information security incidents impacting on personal data. But there are also practical and reputational benefits from responding promptly and appropriately. An effective response can be the last chance to put things right.

This workshop will examine the law and best practice, drawing on real-life case studies, to identify how organisations can position themselves to deal appropriately with data security incidents and data breaches, in order to minimise the impact on customers and service users and mitigate reputational damage.

This is an interactive workshop using exercises and group discussion to support real-world application.

Key Topics

  • GDPR requirements and definitions
  • Information Security standards
  • Receiving reports and information
  • Investigating a breach
  • Time limits
  • Reporting thresholds
  • What is reportable and what is recordable
  • Reporting Mechanisms
  • External reporting ' ICO, DS and others
  • Containment, recovery and closure
  • Dealing with the ICO

All our associates are experienced information governance professionals who have been training and advising in this field for many years.

Event booking button

Event Information

Date 03-02-2025
Cost (ex VAT) From £449 plus VAT
Location Online (live)