How to master the DPIA process - the organisational perspective
Manage episode 415396044 series 3450149
The DPIA process is important. In this podcast we look at it from the organisational perspective. How do you make it work - not legally or technically - but organisationally.
You find the presentation here: https://3963040.fs1.hubspotusercontent-na1.net/hubfs/3963040/Presentations/20240405_masterclass_DPIA.pptx.pdf
It:
- Supports good decision-making,
- Good governance
- Compliance
- Often no DPIA is required – documents the non-action
- It is also good practice to do a DPIA for any other major project which requires the processing of personal data. (ICO)
However, data protection often doesn't now when a new system is coming on board.
It is a cultural issue and we have to do many things to chance it:
- Training and awareness
- Don’t forget VIP’s
- Let’s put it in a policy (and get it out there)
- Hybrid organisation and ambassadors
- We have a process (or more)
- We have buy-in
- Ask…
That is what you'll learn about in this podcast.
Your host: Jacob Høedt Larsen, follow me on Linkedin for more news and views on compliance and privacy: https://www.linkedin.com/in/jacobhoedtlarsen/
Sustainable Compliance is brought to you by Wired Relations - read more about it here: https://www.wiredrelations.com
Wired Relations is a GRC solution - tailored for privacy and information security.
We help organisations turn fragile privacy and information security into sustainable GRC programmes.
We focus on four things:
- Ease-of-use: You don’t need consultants to implement Wired Relations and you don’t need training to use it.
- Collaboration: Privacy and infosec is a team sport. We make it easy to collaborate.
- Overview: Privacy and infosec is complicated enough as it is. Wired Relations makes it easier to get an overview - not harder.
- Organising for GRC: The trick is to organise your processes and workflows so that you can sustain your programme.
16 episodes