Event:             ALB GDPR And E-Privacy Masterclass: European Law – Global Reach.
Date:              18 May 2018
Registration:  8.30am to 9.00am
Event:            9.00am to 5.00pm
Venue:           Amara Singapore, 165 Tanjong Pagar Road, Singapore 088539
Room:             Ballroom 1, Level 3.

8.30am – 9.00am     
Registration

9.00 – 10.15am
GDPR overview

• Why is GDPR relevant to your business?
• Key concepts and definitions
• What is personal data?
• Does GDPR apply to anonymised or pseudonymised data?
• Data Controllers and Joint controllers: the "closest, deepest pockets?"
• Data Processors and representatives in Europe
• Regulators and guidance: ICO, Article 29 WP, EDPB

10.15am – 11.00am
Data protection principles and conditions

• What are the data protection principles?
• Fair processing conditions: consent is not the only way
• What is the accountability principle?
• How can you achieve data protection by design and default?

11.00am – 11.15am
Morning Teabreak

11.15am – 12.00pm
Breach, penalties and sanctions

• What is a personal data breach?
• Breach notification requirements and exemptions.  Meeting the 72 hour deadline.
• Enforcement, fines and sanctions.  How can European regulators reach organisations in Singapore?
• Compensation: who pays?

12.00 – 1.00pm
Data subject rights

• What are the data subject's rights?
• Issues affecting the right to rectification and the right to be forgotten 
• Communication, information and privacy notices
• Protocols and principles for dealing with data subject rights

1.00 – 2.00pm
Networking Lunch

2.00 – 2.45pm
Governance, accountability and compliance

• Data Protection Officers: when must your organisation appoint a DPO?
• Written records and Article 30: the key to compliance?
• Data protection policies: ensuring compliance.
• Privacy Impact assessments and "high risk" processing
• Prior consultation with the regulator
• Profiling and automated decision-making: the greatest risk?

2.45 – 3.00pm
Afternoon Teabreak

3.00 – 4.00pm
Contractual issues

• Data processing contracts and Article 28
• Sub-processors
• Joint controllers: Data sharing agreement or data sharing protocols?
• Audit and entry clauses?
• Are indemnities and liability caps effective under GDPR?

4.00 – 4.20pm
Data Protection and e-privacy

• Understanding the interaction of GDPR and PECR/E-privacy Regulation
• Direct marketing and "spam"
• Cookies and online tracking
• Data retention: how can you choose the appropriate data retention period?

4.20 – 5.00pm
International transfers of personal data

• Cross-border transfers: how to avoid breach
• Adequacy decisions, model clauses and binding corporate rules: which tool should your organisation use to ensure compliance?
• Can you comply with law enforcement and investigatory orders without breaching GDPR?
• Data mapping and essential compliance procedures