|
Conference presented
in association with
Privacy & Data Protection
journal
|
"I think the current format is excellent
and is the best Data Protection Journal around and I have been a
subscriber for many years. Keep up the good work"
Doreen Broom, Data Protection Officer,
Scottish Borders Council |
Our past Conference delegates
say it best:
|
"Excellent event!"
Melissa Gregory, Regional Privacy Adviser, BP
"Fantastic to meet professionals
with the same concerns and questions-having those
concerns and questions addressed by experts was
invaluable and will help shape advice to our clients"
Vanessa Croisier-Challess, Furley Page
"The quality and profile of the speakers was
excellent"
Paul Taylor, Information Policy Manager, The
Information Tribunal
"Many thanks for an excellent conference. It
was incredibly useful to hear from the experts on the 'hot topics'
which are of particular concern to most data protection officers,
including the very recent developments in law. The presentations
were all very informative and, refreshingly, covered topical
problematic data protection issues from a legal, practical and
global perspective"
Alison Fortescue, Financial Times
"The Conference is very well balanced with
regard to the multi-tiered requirements of data protection and
supporting legislation"
Graham Ewing, Data Protection Officer, NHS Lothian
"As usual, an excellent Conference – speakers,
programme and organisation"
Teresa Gudge, Data Protection Officer, Airbus UK
"I attended the 4th Annual Data Protection
Conference in London. I would like to express my sincere gratitude
to the organisers for delivering a splendid Conference that was
highly informative and thought provoking"
Phaedra Francis, Principal Information Officer,
Corporate Strategy and Performance, Association of London Government |
|
Data Protection
Workshops
On the second day of the
7th Annual Data Protection
Compliance Conference, Friday 3rd October 2008, delegates have the opportunity to
choose two of six practical half-day Workshops covering important
aspects of data protection practice.
 |
|
Each Workshop covers an in-depth analysis of a specific issue of
data protection compliance, and will give the delegates opportunities to ask
questions and discover how issues are dealt with at other
organisations. |
These
Workshops can be booked separately or in
conjunction with the Conference. Attendance
at the Workshops by Conference delegates is
optional but it is anticipated that most
Conference delegates will wish to attend one
or more of the Workshops.
Each Workshop is accredited by the Law Society
with 3 CPD Points.
 The workshops were really
useful
Sally Jackson, Partnership Office Assistant, Allen &
Overy LLP
Morning Sessions ( 9.30am – 12.45pm )
A:
Training staff in data protection
compliance: delivering effective,
engaging and sustainable privacy education
in your organisation
Workshop led
by
Fedelma Good, Head of Marketing Privacy and Suppression
Management, Barclays Bank
Data protection compliance is an essential legal
requirement for all organisations. All employees,
regardless of their role, must understand what this
means for them in the context of their daily working
lives. This Workshop provides a step-by-step guide
to putting in place an effective and sustainable data
protection education programme, including:
- techniques and tools to guide you through the
educational planning process
- practical advice to help you avoid the pitfalls
and keep the plan on track
- ideas on content, format and delivery to ensure
that employees understand and stay engaged
|
Workshop Leader - Biography:
Fedelma Good is Head of
Marketing Privacy and Suppression Management at Barclays Bank. She works
with marketing teams across the organisation to ensure that their direct
marketing activities are conducted in line with relevant privacy and data
protection laws.
Fedelma has previously worked with the Bank of Ireland and Deloitte. |
|
 |
B:
Data security - practical aspects
of keeping data safe
Workshop led
by Phil Tompkins, Director, Dickinson Dees
In the light of recent breaches and Enforcement
Notices, the issue of data security has never been
higher on the compliance agenda. This Workshop
guides delegates through the law on data security.
Using scenarios to highlight key issues, this Workshop
considers:
- the various aspects of organisational security
including staff training, combating blagging and
phishing, contracts with third parties and physical
security protocols
- technical security measures including the use of
passwords for laptops and portable media, and the
use of emails and the internet to transfer personal
data
- measures to prevent unauthorised processing,
data loss, damage or destruction
- data processing and data sharing arrangements,
and DPA clauses in contracts
- guidance on good practice in data security
|
Workshop Leader - Biography:
Phil Tompkins is a Director
at Dickinson Dees and his practice areas include information law and IT
contracts. Phil advises various private and public sector bodies on all aspects
of data protection law including data security and data protection issues in
contracts.
Phil lectures on the LLM in information rights law at the University of
Northumbria and is currently writing a practitioner’s guide for the Law Society
on information sharing. |
|
- Awaiting photo - |
C:
Monitoring, testing and
investigating staff
Workshop led
by
Hazel Grant, Partner, Bird & Bird
The need to monitor, test and/or investigate staff
arises in a variety of ways - these include performance
evaluation, compliance checks, security issues, drug
testing, internal investigations, regulatory
investigations, and CCTV usage. Each of these
activities must comply with data protection regulations.
This Workshop considers:
- acceptable practices for monitoring staff by
phone, computers and tracking devices
- the legality of testing staff and how to use the
results
- best practices for using CCTV
- the notification that should be given prior to
data gathering activities
- how to manage the retention and disclosure of
personal data gathered through monitoring, testing
or other investigation of staff
|
Workshop Leader - Biography:
Hazel Grant is a Partner in
Bird & Bird’s IT Sector Group, where she advises on public procurement and
contract law for IT projects, the licensing of software, databases and data
protection.
Hazel’s clients range from central government departments to web retailers
and global professional partnerships. |
|
 |
Afternoon Sessions
( 2.00pm – 5.15pm )
D:
Creating data protection policies
for your organisation
Workshop led by
Peter Hall, Partner, Wragge & Co
Data protection policies are a vital tool for
compliance but they can become long, bureaucratic and
difficult for employees to understand. Using real
examples, this Workshop looks at the reasons for
policies, how to create them and the need to keep them
simple. In this Workshop delegates look at:
- employee and customer data policies
- IT and data security policies
- subject access and information request policies
- CCTV and employee monitoring policies
- the interplay between employment duties and data
protection policies
|
Workshop Leader - Biography:
Peter Hall is a Partner at
Wragge & Co and heads the IT team. He advises clients on a full range of
IT issues and specialises in data protection, procurement, e-business, and IT
and business process outsourcing.
His clients are from a variety of sectors, including financial services and
life sciences. |
|
- Awaiting photo - |
E:
How to conduct a data protection compliance
review
Workshop led
by
Andrew Sharpe, Partner and Carolyn Bigg,
Solicitor, Charles Russell
Recent high profile data security breaches, and the
ensuing bad publicity, means that data protection
compliance is essential. A compliance audit is one
way to avoid your organisation being a front page story.
This Workshop considers how to manage an audit process
and how best to use the results of the audit to improve
your organisation’s compliance. The session
includes:
- the review process
– a formal or informal approach?
- the key steps of the review
– which staff to
involve, what documentation to consider
- issues to focus on
– data security, fair processing notices,
transfers of data, etc.
- how to use the results
– getting the
message across and follow-up actions to improve
compliance
|
Workshop Leaders - Biographies:
Andrew Sharpe is a Partner
with Charles Russell LLP, and practices information technology and
telecommunications law. He regularly lectures on data protection and
freedom of information issues, as well as conducting data protection audits.
He is a regular contributor of articles to
Privacy & Data Protection journal,
Freedom of Information journal
and Computer Law & Security Report.
Carolyn Bigg is a
Solicitor at Charles Russell LLP, specialising in technology and information
law, with particular expertise in procurement, outsourcing and managed service
agreements. She is a member of Charles Russell’s dedicated data protection
and freedom of information teams.
Carolyn advises in the field of
e-commerce, and conducts data protection audits for a range of organisations. |
|
|
F:
Data breaches - what to do when they happen
Workshop led
by
Andrew Dyson, Partner, DLA Piper
It’s no longer a question of ‘if’ but ‘when’ any
organisation will experience a data breach. Using
case studies of recent enforcement actions, as well as
the direct experience of the tutor, delegates will work
through the practical implications of a breach,
including:
- mitigating any immediate damage and distress
- liaising effectively with regulators
- taking appropriate remedial action
- restoring confidence for the future
- avoiding adverse publicity
|
Workshop Leader - Biography:
Andrew Dyson is a Partner in
the Technology Media and Commerce group at DLA Piper. He advises clients
on IT contracts and information law issues, with specialist expertise in data
protection and freedom of information. Andrew works closely with significant
public and private sector organisations, developing effective strategies for
compliance.
He has particular expertise in advising on the management of personal data in
the context of outsourcing transactions, corporate acquisitions and in the
health and HR environments. |
|
 |
|
|
