The course is aimed at organizations with many systems, stakeholders and complex structures.

The course reviews the elements in an inventory relative to GDPR. What should be described, how should it be described, and how to ensure a consistent structure in the descriptions.

The purpose of this seminar is to provide all participants with the knowledge on the data mapping exercises and how to develop a data flow, inventory, and resource (locations) map (“data map”) for each separate data privacy lifecycle. Based on the data inventory participants will be able to: a) identifying what personal information (“personal data”) b) how it is collected, used, shared, stored and disposed; c) classifying the different levels of data sensitivity d) the special GDPR requirements for Marketing, Human Resources, mobile apps, websites, etc. e) The different data privacy lifecycles on (data collection, processing, locations, etc.)

During the seminar, we will conduct a workshop as a formalised, but a repeatable process on how to a) compose each data resource (data location); b) identify the data that is transferred across what international borders, c) assign resource ownership, a custodian to provide governance support. Participants will get complete knowledge on data flows, inventory and supplies to enable them to recommend appropriate improvements in controls better and assist in identifying risks, threats and current vulnerabilities when they return to their area of responsibilities.