Data Protection Workshop 1 · Task 1

Data Protection Fundamentals

Jurisdiction selected: Colombia — Law 1581 of 2012 and Decree 1377 of 2013 (compiled in Decree 1074 of 2015)

After this session you can

  • Tell personal, sensitive, pseudonymised and anonymised data apart
  • Explain processing and the roles of controller, processor and data subject
  • Name the core data protection principles and apply them to everyday work
  • Recognise data transfers to processors, other organisations and other countries
  • Describe the consequences of non-compliance for the organisation

Agenda

  • Personal data and anonymised data
  • Sensitive data
  • Processing and roles
  • The core principles
  • Lawful processing and consent
  • Data transfers
  • Consequences of non-compliance
  • Your jurisdiction at a glance
  • Check your understanding and next steps