Click to view dynamic map
Data protection officer training

Date: 4th October 2019

Time: 09:00 - 16:40

Location:
Law Society of Scotland
Atria One
144 Morrison Street
Edinburgh
EH3 8EX

CPD Hours: 6hours

This event will provide you with a further grounding in data protection law – including a progress report on GDPR – while addressing the practicalities of the role such as providing training to colleagues and implementing policies within the organisation.
Training Details


6 hours verifiable CPD

A data protection officer (DPO) is responsible for ensuring their organisation’s compliance with the GDPR and other data protection laws and policies, as well as raising awareness and providing training for their colleagues. As such, the Information Commissioner’s Office states that a DPO should have a good knowledge of data protection law and an awareness of the data protection needs and processing activities.

Law firms aren’t automatically required to appoint a data protection officer but are likely to find themselves having to do so on the basis of the personal data they handle. Additionally, legal professionals working in-house will often be asked to take on the role of data protection officer.

This event is aimed at those who have been asked to be data protection officers and those already in the role looking to learn more. It will provide you with a further grounding in data protection law – including a progress report on GDPR – while addressing the practicalities of the role such as providing training to colleagues and implementing policies within the organisation.

This event will enable you to:

  • Understand the role and responsibilities of the data protection officer
  • Implement data protection policies within your organisation
  • Minimise risks of cyber incidents and data breaches
  • Ensure that colleagues and external suppliers and clients are aware of their data protection obligations
  • Helena Brown, Partner, Addleshaw Goddard, Chair
  • Laura Irvine, Partner, Davidson Chalmers Stewart LLP
  • Maureen Falconer, Regional Manager (Scotland), Information Commissioner's Office
  • Dr Rena Gertz, Data Protection Officer, University of Edinburgh
  • Stephen Grant, Associate, Wright, Johnston & Mackenzie LLP
  • Sorcha Lorimer, Founder, Trace
  • Rebecca Ablett, Senior Solicitor, Burness Paull
Testmonials

"Very informative and useful to hear different experiences."

February 2018

"Knowledgeable speakers with lots of practical examples."

February 2018

"The speakers were very engaging and relevant."

February 2018

  • 09:00 - 09:20

    Registration and networking
  • Speaker
    Helena Brown

    Helena leads the data protection team at Addleshaw Goddard and has 18 years of experience as a specialist commercial, technology and data lawyer. She leads a team across our UK and international offices delivering complex and high profile data advice for a number of clients, including many of the UK’s major financial services providers including banks, building societies and pensions / insurance providers. Helena also advises many clients operating in the payments industry  including a number of payment service providers, and has been involved in industry consultations on the use of data in payments and open banking. As an accredited Practitioner in Data Protection, she provides support on the full spectrum of information matters including GDPR compliance audit, complex regulatory opinions, marketing and consent reviews, international data transfers, service offshoring, subject access, and ICO complaints and investigations . Helena also provides specialist regulatory input on information rights litigation, which enables her to give a very practical view of risk in data protection advisory matters. Helena is a member of the Law Society of Scotland’s technology committee and led on implementation of their award winning cyber security guidance.

  • 09:30 - 10:10

    Working with internal and external clients

    • Providing training to colleagues
    • Working with data subjects
    • Managing subject access requests and freedom of information

    Speaker

    Dr Rena Gertz completed her law degree in Germany before moving to Scotland for a Masters Degree and PhD in law, followed by a research fellowship at Edinburgh University. Leaving academia, she worked in local government for 7 years as DP and FOI Compliance Officer, while still maintaining her relationship with Edinburgh University, lecturing on several Masters Degree programmes. In May 2017 she returned fully to Edinburgh University by taking up the role of Data Protection Officer.

    10:10 - 10:20

    Questions and discussion

    10:20 - 11:00

    Using technology to improve data protection compliance

    • Using data visualisations to embed privacy by design thinking
    • How to make compliance visual, embedded and engaging
    • Humanising data protection through visualisation
    • Using tech and visualisation to embed privacy by design thinking

    Speaker
    Sorcha Lorimer

    Sorcha Lorimer is the CEO of Trace®, innovative RegTech software which makes GDPR compliance and data protection bitesized, visual and streamlined. Trace's platform helps organisations model personal data, assess their third party cloud processors, and mitigate privacy and legal risk.

    A qualified privacy and risk professional and trainer, before founding Trace®, Sorcha was Group Head of Digital at Standard Life and has worked in digital and data for well over a decade, including agency and consultancy side. Sorcha is passionate about making complex subjects accessible, humanising data protection, and building intuitive, secure software.

    11:00 - 11:10

    Questions and discussion

  • 11:10 - 11:25

    Refreshments and networking
  • 11:25 - 12:05

    Implementing policies within your organisation

    • Impact assessments and audits
    • What should be in a privacy policy?
    • Conducting an information audit

    Speaker

    Stephen Grant is an Associate at Wright, Johnston & Mackenzie LLP and regularly advises businesses from all sectors and of all sizes on data protection matters. He regularly speaks and writes for major publications on the topic. Coming from a Computer Science background Stephen understands the practical implications that businesses may have when trying to implement a data protection infrastructure within a business.

    12:05 - 12:15

    Questions and discussion

    12:15 - 12:55

    GDPR: One year on

    • Key principles of GDPR
    • Lingering areas of uncertainty
    • Important case law

    Speaker

    Laura is Head of the Regulatory Team at Davidson Chalmers Stewart LLP, a Criminal Solicitor Advocate and Accredited by the Law Society of Scotland as a Specialist in Freedom of Information and Data Protection Law.

    Her ‘claim to fame’ is that she was part of the only legal team in the UK to have successfully overturned a data breach fine imposed by the ICO under the Data Protection Act 1998 – so far! She wrote the Law Society of Scotland’s Guide to the GDPR and is a co-founder of PODs (Protectors of Data Scotland) the pre-eminent group of data protection enthusiasts in Scotland.

    She works with clients across sectors providing contentious and non-contentious data protection advice. She also advises on cyber security matters, working collaboratively with most, if not all of the cyber security firms in Scotland.

    She is a board member of the Scottish Business Resilience Centre which works with Government, Police and other public sector bodies to assist the private sector in Scotland to remain resilient.  

    12:55 - 13:05

    Questions and discussion

  • 13:05 - 13:50

    Lunch and networking
  • 13:50 - 14:30

    Working with the regulator

    • The role of the ICO
    • What guidance can the ICO provide?
    • When and how should they be contacted?

    Speaker

    Maureen Falconer joined the ICO in 2007, and is currently Regional Manager for the ICO’s Scotland Office. Maureen works with a variety of organisations, providing awareness-raising events, advice and guidance in all things data protection. Maureen regularly represents the ICO on development/steering groups, providing advice and guidance at the early stages of public sector initiatives. As well as the day-to-day management of the office and the Scotland Team, Maureen has a particular interest in matters relating to the NHS, Education and Social Work.

    Prior to joining the ICO, Maureen worked in the Scottish Parliament as parliamentary researcher for Dennis Canavan MSP until his retirement in 2007. Coming from an academic background, Maureen lectured and researched in public administration with specific interests in health and education.

    14:30 - 14:40

    Questions and discussion

    14:40 - 15:20

    Minimising risk and managing data breaches

    • Cybersecurity risks and how to mitigate them
    • Data breaches - legal remedies and options to consider
    • Case study

    Speaker
    Rebecca Ablett

    Rebecca is a Senior Solicitor in Burness Paull’s dispute resolution division, working in the firm’s contentious IP and Technology and Media teams.

    She works closely with contentious IP and Technology practice head Colin Hulme and advises on a wide variety of IP and IT disputes concerning patents, trade marks, copyright, software, design rights and confidential information.  Rebecca regularly acts for clients in the Court of Session.

    Rebecca also advises on all aspects of contentious media law, including defamation, reputation management and privacy.

    15:20 - 15:30

    Questions and discussion

  • 15:30 - 15:45

    Refreshments and networking
  • 15:45 - 16:30

    DPO case studies workshop

    Speaker

    Laura is Head of the Regulatory Team at Davidson Chalmers Stewart LLP, a Criminal Solicitor Advocate and Accredited by the Law Society of Scotland as a Specialist in Freedom of Information and Data Protection Law.

    Her ‘claim to fame’ is that she was part of the only legal team in the UK to have successfully overturned a data breach fine imposed by the ICO under the Data Protection Act 1998 – so far! She wrote the Law Society of Scotland’s Guide to the GDPR and is a co-founder of PODs (Protectors of Data Scotland) the pre-eminent group of data protection enthusiasts in Scotland.

    She works with clients across sectors providing contentious and non-contentious data protection advice. She also advises on cyber security matters, working collaboratively with most, if not all of the cyber security firms in Scotland.

    She is a board member of the Scottish Business Resilience Centre which works with Government, Police and other public sector bodies to assist the private sector in Scotland to remain resilient.  

  •  

Prices

prices exclude VAT

Member:
£220.83
 
New member:
£183.33
 
Accredited Paralegal:
£183.33
 
Trainee:
£183.33
 
Unemployed member:
£166.67
 
Non-member:
£241.67
 

Contact Us