Data Protection and Compliance,2/E (Paperback)

Large-scale data loss and data privacy compliance breaches continue to make headline news, highlighting the need for stringent data protection policies, especially when personal or commercially sensitive information is at stake. While regulations and legislation exist to address these issues, how organisations can best tailor their compliance approaches to their own operational circumstances has remained an open question. The focus of this book is on operationalising a truly risk-based approach to data protection and compliance, i.e. not just regulatory frameworks and legalistic compliance.

Table Of Contents

Part I - The Big Picture

1. Introduction to data protection

2. Introduction to the GDPR

3. Introduction to ePrivacy

4. Introduction to operational data protection

Part II - Core Law

5. The principles of data protection

6. The rights of data subjects

Part III - Operating Internationally

7. National supervision within an international framework

8. Transferring data between the GDPR landmass and third countries

9. Data protection beyond the GDPR landmass

Part IV - Delivery

10. Mechanisms to support operational compliance

11. Programmatic approaches for delivering data protection by design and default

12. Being accountable for records of processing, legitimate interests and risk management

13. 'The journey to code'

Part V - Adverse Scrutiny

14. How to prepare for the risks of challenge and 'adverse scrutiny'

15. Complaints, rights requests, regulatory investigations and litigation

16. Regulatory action

17. Handling personal data breaches

About the Author