General Data Protection Regulation Alan Chandler,

Transcript:General Data Protection Regulation Alan Chandler,:
General Data Protection Regulation Alan Chandler, Chartered Insurer on linkedin mail alanchandler@uwclub.net I have trained more than 2,000 individuals to become ACII qualified I have trained over 50% of the individuals in the last 8 years that have gone onto achieve the highest ACII pass in the whole of the UK. I train to a pass rate of more than 96% in all CII qualification levels. Certificate , Diploma and Advanced Diploma. I deliver the Allianz scholarship and academy programmes in both the UK and Ireland and I have been a Cii examiner. I have trained students who have won national prizes in almost all ACII subjects including Insurance Law (MO5), Liability (M96), Commercial Property and BI (M93), Personal Lines Insurance (P86), Business and Finance (M92), Underwriting Practice (M80), Advanced Underwriting (960), Claims Practice (M85), Advanced Claims (820), Marketing (945), Advanced Broking (930) and Advanced Risk Management (992). Understand the background to GDPR Describe what the changes are Explain what the impact is on customers and firms and risks associated Understand what the regulators are doing with GDPR since the launch Objectives Some background to the Regulation The definition of ‘personal data’ What is meant by ‘protection’ Establishing your legal basis for processing data What we will cover GDPR came into effect 25th May 2018, and will stay regardless of Brexit The UK government has enacted the requirements of the GDPR through the Data Protection Act 2018 The GDPR is a Regulation not a Directive Background The Aim is: To ensure the same standard of Data Protection across all EU Member States To strengthen the rights of individual Data Subjects To ensure the ‘free flow’ of data between EU Member States is effective and protected Background Recital 4 of GDPR states “The Processing of Personal Data should be designed to serve mankind.” Background ICO will have increased powers (bigger fines!) Previous maximum fines under DPA was £500,000 New powers may increase to 20m Euros or up to 4% of global turnover, whichever is greater Background First major GDPR fine was a Portuguese hospital hit by their equivalent of the ICO, fine 400,000 euros for breaches including allowing 985 users doctor level privilege even though they only had 296 doctors! First GDPR fine In 2013/14 Yahoo had the greatest data breach in history with 3 billion user accounts being breached, it did not notify anyone until well after 72 hours. Experts