Online or Classroom

Every course purposefully designed

How to do a Data Protection Impact Assessment

Data Protection Impact Assessments are a key aspect of the 'Privacy by Design' requirements under the UK GDPR.

Although 'PIAs' (Privacy Impact Assessments) have been around for a while, there is some confusion over when to complete a DPIA, at what stage and who actually completes them and signs them off?

On this full day workshop, we will go through every aspect of a DPIA. From best practice on designing a template DPIA through to determining 'high risks' and what may or may not require ICO consultation. Through a mixture of content based learning and interactive discussion we'll explore the requirements of a DPIA and analyse a real DPIA.

By the end of this workshop you will have a good understanding of when a DPIA is required, be able to use best practice and resources for creating, embedding and completing a DPIA and acquire the practical skills to do a DPIA from to start to finish, including follow up and audit.

Key Topics

  • Data Protection by Design
  • Ethics: What is this?
  • What is meant by 'Data Protection Impact'?
  • What is a DPIA?
  • When do you need to complete a DPIA?
  • Structure of a DPIA and content
  • Who should complete a DPIA?
  • Process for completing a DPIA
  • Recording and presenting outcomes from a DPIA
  • How to do Risk Assessments for a DPIA
  • Risks, Controls,Assessments, Feedback
  • Who accepts risks from a DPIA?
  • Key roles needed in the process of a DPIA
  • What can the DPO 'sign off'?

Dates & Cost

Online

£399 plus VAT

Classroom

£449 plus VAT

Timings: 10am to 4pm

 
Date: 16 Oct 2024
Location: Online
Date: 03 Dec 2024
Location: Online
Date: 15 Jan 2025
Location: Online
Date: 05 Mar 2025
Location: Online
Date: 28 Apr 2025
Location: Online
Date: 11 Jun 2025
Location: Online
Date: 25 Jul 2025
Location: Online
Date: 04 Sep 2025
Location: Online
Date: 16 Oct 2025
Location: Online
Date: 03 Dec 2025
Location: Online

Course tutors

All our associates are experienced information governance professionals who have been training and advising in this field for many years.

  • Philip Jones

    Course Tutor


    Philip has 40 years of information management experience in the public and private sectors both as a practitioner and at a senior management level. He was Head of Information Governance at Staffordshire Council. Philip holds a masters degree in information management and an MBA. He is a senior associate for Act Now and Chair of the Exam Panel.

  • Scott Sammons

    Course Tutor


    Scott is an information governance specialist with over 15 years of experience. He has delivered a number international projects for Act Now Training and is a senior tutor on the Advanced Certificate in GDPR Practice. His previous roles include European Data Protection Lead for a bank and GDPR Implementation lead for a council. He is a former Chair of the IRMS.

  • Susan Wolf

    Course Tutor


    Susan holds a judicial position as a Fee Paid Member of the Upper Tribunal (Information Rights). She spent ten years teaching the LLM in Information Rights Law at Northumbria University and developed their Postgraduate Certificate in Data Protection Law and Information Governance. Susan is one of the senior curriculum developers for Act Now Training.

  • Lynn Wyeth

    Course Tutor


    Lynn is the Head of Information Governance for a large local authority and has over 20 years of experience as a practitioner. She holds a post graduate diploma in Information Rights, the CISMP certificate and is an accredited HSCIPP privacy practitioner. She is the author of two books and is currently undertaking a PhD. Her experience is across GDPR, FOI and RIPA.

  • Iain Harrison

    Course Tutor


    Iain is currently an Information Governance Risk Manager for a large local authority and has over 20 years of experience. He has been delivering training for Act Now for over 7 years in GDPR and FOI for public, private and charitable organisations. His extensive experience in planning and implementation of Information Rights legislation allows him to bring training sessions to life.

  • Kirsty Squires

    Course Tutor


    Kirsty is currently a DPO for a number of local authorities and has over 15 years of experience in Data Governance. She has led the IG Project Team on transformation projects to deliver local government restructure in Northamptonshire, dealing with issues including information sharing, data protection by design and leading on training and policy development.

  • Naomi Matthews

    Course Tutor


    Naomi is a local authority lawyer and holds a judicial position as a Fee Paid Member of the Upper Tribunal (Information Rights). She has extensive experience in all areas of information compliance and RIPA. Her training has been commended by RIPA inspectors and her advice has helped many local authorities understand the law and practicalities of covert surveillance.

  • Suzanne Ballabás

    Course Tutor


    Suzanne Ballabás, is a privacy professional with over ten years of practical experience in implementing privacy practices across various international organisations, in addition to acting as a compliance officer for multiple regulated entities within the UAE’s financial districts of DIFC and ADGM.

  • Olu Odeniyi

    Course Tutor


    Olu Odeniyi is a Cyber Security, Information Security and Digital Transformation Trusted Advisor who has 30 years' experience helping organisations maximise gain from technology solutions, including optimisation of business operations and processes. During this time, Olu held several key senior leadership, strategic and operational positions, in the public and private sectors.

  • Robert Bateman

    Course Tutor


    Robert Bateman is a trainer and writer specialising in privacy, data protection, security, and AI. He is a respected voice on privacy and has been writing, researching, and leading conversations in the field since 2017.

  • Craig Geddes

    Course Tutor


    Craig is a qualified archivist and records manager, with 28 years experience working across the range of information governance activities. He has worked for several Scottish local authorities as Archivist, Records Manager, and Senior Information and Improvement Officer.

What our clients say about us

    The training was well paced and thought provoking. It gives a really informative overview of the subject. The trainer actively encouraged everyone to speak with no-one individual hogging the stage. The trainer was entertaining and very knowledgeable with an enthusiasm and passion
    for his subject that was catching. I would not hesitate to recommend this course to colleagues. DU, Powys County Council