Название: Data Protection Officer
Автор: Filip Johnssen, Sofia Edvardsen
Издательство: BCS, The Chartered Institute for IT
Год: 2021
Страниц: 260
Язык: английский
Формат: epub
Размер: 10.2 MB

Being a data protection officer (DPO) involves much more than just knowing the law around data protection, and it is not just about technology and standards. It is a multifaceted role involving many skill sets. Being a DPO is a multitasking exercise like most senior roles. This book will clarify the role of the DPO and give you an overview of practical, tested and proven ways to manage an organisation’s data protection practice and compliance. In this book, we have assembled substantial data protection experience around how to build data protection programmes, work with management, and create awareness of privacy and other areas of interest.

This book provides a practical guide to the DPO role, encompassing the key activities you’ll need to manage to succeed in the role. Coverage includes data protection fundamentals and processes, understanding risk and relevant standards, frameworks and tools, with DPO tips also embedded throughout the book and case studies included to support practice-based learning.

This book aims to help you as a DPO in your day-to-day work and also as you set up a more long-term strategic data protection programme that can be managed over time. It is not a legal textbook; it is a practitioner’s guide based on legal requirements and obligations. It aims to be your companion, helping you to understand the founding principles and essence of your role. It also aspires to act as a reference for the skills and expertise you should have, and to offer insight on how to implement complex legal text in your organisation. By giving concrete examples, we hope to facilitate understanding of the underlying articles and principles of the GDPR and other legal texts. Most of the examples are taken from our own experience and, as such, are real-world lessons from situations we have come across and solved.

While this book is primarily aimed at helping DPOs, anyone with an interest in data protection and/or implementing legal requirements could benefit from reading it.