Workshop 1
Introduction & Applicable Laws

Back to the DPO Guide

Introduction & Applicable Laws

The first workshop lays the foundation. The team learns the essential data protection concepts, identifies which laws apply to the organisation, defines the scope of the programme and agrees on the team and schedule for all 13 workshops.

Workshop tasks

1. 1. Data protection fundamentals

   Make sure the team shares the same concepts: personal and sensitive data, processing, controller, processor and data subject, and the core principles such as purpose limitation, proportionality, data quality and security.

2. 2. Identify applicable laws

   Determine which laws apply based on where the organisation operates, where the people whose data it processes are located, sector rules and contractual commitments to clients.

   In ResGuard: Policy Framework

3. 3. Define the programme scope

   Define which entities, locations, processes and groups of data subjects (clients, employees, applicants, vendors) the programme covers, and document any exclusions.

   In ResGuard: Data Protection Dashboard

4. 4. Project team & roadmap

   Name a management sponsor, a programme lead and contacts in HR, IT, sales and marketing. Plan dates and participants for each workshop.

5. 5. Workshop review & close-out

   Review the results with the data protection lead, attach evidence, log open points as new tasks and close the objective in ResGuard.

   In ResGuard: Objective Manager

Expected result

• The project team understands the core concepts and principles
• Register of applicable laws documented in the Policy Framework
• Programme scope approved by management
• Project team and schedule for all 13 workshops agreed

ResGuard modules: Data Protection Dashboard, Policy Framework