Compliance Advice & Training
Creating a safe space to ask questions and learn is crucial to encouraging and fostering understanding of complex data protection concepts in your business. Data touches all departments, from IT to HR to Marketing, and it’s important to make sure that you’re walking the walk and talking the talk.
Training and awareness is key to putting your policies and procedures into practice. The company needs to be aligned on what its goals are, what it requires people to do and what responsibilities they have. The training you provide staff must be relevant, accurate and up to date. The law is always changing, so this can be hard to achieve – so, why not lean on your friendly neighbourhood law firm, Stephenson Law?
It's not just about appointing a Data Protection Officer or shafting the responsibility to an expert – it’s about engaging with the law and the rules so that when problems or questions do arise, you are fit to handle them without panicking or falling at the first hurdle.
What training do you need?
It’s not just a one-and-done sort of situation we’re talking about here. You’ll need onboarding training, and refresher courses to make sure everyone is up to speed on the latest changes and requirements. Think about:
National and sector-specific requirements - is your business local or international? Cross-border transfers might be relevant for you.
How to handle requests, data sharing, information security, personal data breaches and records management.
The training needs of all staff depending on their roles and how much personal data they interact with.
Assigning responsibilities for managing information governance and data protection training across your organisation.
How to meet training needs within agreed time-scales.
Creating useful resources for staff to refer to in future (don't expect everyone to memorise all this information in one hit!)
Regularly reviewing and monitoring your programme to ensure that it remains accurate and up to date (taking into account any feedback you receive along the way).
Senior management sign off processes - don't create unnecessary barriers where you can avoid it, but equally, make sure it's clear who has final say when it comes to big risks.