Senior Management Perspectives
Senior Management Perspectives
GDPR is unambiguous. Data privacy and protection are Board level agenda items.
Management accountability is the backbone of the General Data Protection Regulation. Named senior management will be accountable for personal data. Regulators have the tools and teeth to hold senior managers to account and sanction failings.
On the positive side, GDPR is intended to foster an environment of trust between organisations, their clients, employees and regulators. For many organisations, GDPR compliance will mean an overhaul of how they manage data about people. The tasks will include:
- Implementing new processes/systems/controls/oversight to satisfy (1) new rights of Data Subjects, (2) new demands from regulators and (3) upgraded risk management, compliance, governance and internal audit
- Upgrading systems/data architecture to provide a cohesive framework for the above changes
- Effecting cultural change, ensuring "Privacy by design and default" is placed at the heart of the organisation and enforced through policies and codes of conduct
- Designing and implementing a data ownership model
- Defining management roles, responsibilities and accountabilities
- Communicating with, and training, your people
WHAT you have to do is reasonably clear. This course is about HOW you go about doing it! It provides a comprehensive overview of the challenges facing senior management and industry best practice approaches for addressing them.
This course is part of the Data Management Agenda for Privacy
Course Contents
Overview
GDPR and the Senior Manager (SM)
- The rights of data subjects under GDPR
- The implications for the organisation
- The implications for senior managers
Responses required for GDPR
- Key processes for normal and exceptional operations
- Risk Management, governance and oversight
- A culture of respect and protection
- An understanding of personal data management
The Data Management Perspective
- Data is at the heart of the organisation
- Privacy is just one aspect to be managed. Other demands on data about people
- Where is the data?
- What are the flows, controls and quality?
Best Practice Ownership and Accountability Models
- Lessons learned from the banking crisis
- Proven governance and control models
- Risk based prioritisation and allocation of resource
- Development of key practitioners in key areas
- Collaboration
- Pragmatic approach to data flows and storage
Do's and Don't for Senior Managers
- Do focus on culture and empowerment
- Do have clear governance, escalation and remediation capabilities
- Do identify and document key systems and data
- Do scope roles, define responsibilities and name names
- Don't create a goverance monster you can't control
- Don't create a separate 'tick in the box GDPR' project
- Don't assume. Period!