EU-GDPR TRAINING - NOV 2018 - VERSION...

4
HRDF CLAIMABLE 100% 1st November 2018 G Hotel Gurney, Penang. 21st November 2018 The Ritz-Carlton, KL. Program Co-ordinators: Mr. Kersh LL.B (Hons), CLP Tel: +6 017 44 44 0 99 Mr. K. Pathma LL.B (Hons), CLP Tel: +6 013 4255 803 Email: [email protected] Organized by: POWER SOLUTIONS TRAINING MANAGEMENT PLT GRM TRAINING SDN BHD PAYMENT: Payment by cheques should be crossed and made payable to :- "POWER SOLUTIONS TRAINING MANAGEMENT PLT” THE COURSE FEE: RM 1895.00 The full fee is required with your registration. We are registered with: EU GDPR 2018 IN HOSPITALITY CONTACT US Are you ready for action? "EUROPEAN UNION GENERAL DATA PROTECTION REGULATION 2018" IS YOUR ORGANIZATION EUGDPR COMPLIANT? OR RISK PAYING MILLIONS IN FINES! DEALING WITH EUROPEAN GUESTS? COMPLIMENTARY! EUGDPR TOOLKIT GDPR Compliance Booklet Training Slides for Re-training GDPR Hospitality Checklist together with

Transcript of EU-GDPR TRAINING - NOV 2018 - VERSION...

Page 1: EU-GDPR TRAINING - NOV 2018 - VERSION 2grmtraining.com.my/online/course/EU-GDPR_TRAINING-NOV_2018.pdf · The Ritz-Carlton, KL. Program Co-ordinators: M r . K e r s h L L . B ( H o

HRDF CLAIMABLE

100%1st November 2018 G Hotel Gurney, Penang.

21st November 2018 The Ritz-Carlton, KL.

Program Co-ordinators: Mr. Kersh   LL.B (Hons), CLP Tel: +6 017 44 44 0 99  Mr. K. Pathma   LL.B (Hons), CLP Tel: +6 013 4255 803 Email: [email protected] Organized by: POWER SOLUTIONS TRAININGMANAGEMENT PLT GRM TRAINING SDN BHD PAYMENT: Payment by cheques should be crossed andmade payable to :- "POWER SOLUTIONS TRAININGMANAGEMENT PLT” THE COURSE FEE: RM 1895.00 The full fee is required with your registration.

We are registered with:

EU GDPR 2018 IN HOSPITALITY

CONTACT US

Are you ready for action?

"EUROPEAN UNION GENERAL DATA PROTECTION REGULATION 2018"

IS YOUR ORGANIZATION EUGDPR COMPLIANT? OR RISK PAYING MILLIONS IN FINES!

DEALING WITH EUROPEAN GUESTS?

C O M P L I M E N T A R Y !

EUGDPR TOOLKITGDPR Compliance Booklet Training Slides for Re-training GDPR Hospitality Checklist

together with

Page 2: EU-GDPR TRAINING - NOV 2018 - VERSION 2grmtraining.com.my/online/course/EU-GDPR_TRAINING-NOV_2018.pdf · The Ritz-Carlton, KL. Program Co-ordinators: M r . K e r s h L L . B ( H o

http://www.theedgemarkets.com/article/gobind-data-protection-laws-need-updating-time-time

Page 3: EU-GDPR TRAINING - NOV 2018 - VERSION 2grmtraining.com.my/online/course/EU-GDPR_TRAINING-NOV_2018.pdf · The Ritz-Carlton, KL. Program Co-ordinators: M r . K e r s h L L . B ( H o

How will EU - GDPR affect

hotels?

How are hotels getting ready

for the EU - GDPR?

COURSE CONTENT

EU-GDPR 2018 came into force on May 25th 2018.   Hotels in the EU and Non EU countries may faceadministrative fines of up to 4% of global turnover or€ 20,000,000.00, whichever is higher if found to benon-compliant.   Typically, a hotel’s database will hold some or all of thefollowing information which can include: guest names,addresses, date of birth, credit card details, passportdetails, dietary requirements, medical conditions andmore. These data comes under sensitive details that could beused fraudulently, meaning there is a closecorrespondence between the Payment Card IndustryData Security Standard (PCI DSS) and the EU - GDPR. Most bookings are done by guest from Europe toMalaysian hotels as such personal data is flowing frominside Europe to Non-Eu countries therefore EU-GDPRwill apply to ALL Malaysian Hotels.   Also, all suppliers to the hotel which uses the guest’spersonal data including cleaners, caterers, channelmanagers, property management system suppliers,online travel agencies, global distribution systems, willbe affected by EU-GDPR 2018. 

It is essential that hotels create awareness to all the hotelmanagement team. There may be changes in proceduresor systems, so all managers should be aware of EU-GDPR,fully understand it, and be able to understand the impacton their department. Adequate resources should be set aside to updateexisting policies and procedures to ensure complianceand staff should have appropriate training for theongoing maintenance of EU-GDPR compliance.

Getting to Know the EU-GDPR

What is the EU-GDPR? Whom it Affects, and How? The Initial Requirements. Rights and Responsibilities. The Challenges of Compliance. Who Enforces the Rules?

Understanding the Seven key principles   

Understanding the 7 key principles and suitable EUArticles. Consent - What are the key changes to make inpractice? How should we obtain, record and manage consent? What information should a consent request include? What is valid and invalid consent?

Personal Data –

What is Personal data? Is Pseudonym data still personal data? Is Anonymity data personal data? Is Legal identity personal data?  Understanding relevant EU-GDPR Articles. What are identifiers and Related Factors and theconcept of “Relates to”? Processing, Fines & Penalties, email Marketing to EUcountries, The Right to be informed, Records ofProcessing Activities, Right of Access,  Right to beforgotten. What happens when different organisations process thesame data for different purposes?

Understanding the processes for compliance - Creatingdocumentation

Data protection self-assessment as Data User and /orData Processor Information security - Assess your compliance withdata protection in the specific areas of information andcyber security policy and risk, mobile and homeworking, removable media, access controls andmalware protection Direct marketing Records Management Data Sharing and Subject Access

MODULE 1

MODULE 2

MODULE 3

• Determine if your organization is affected by EU-GDPR. • Obtain understanding of the European view on privacy. • Demonstrate your competence in privacy protection. • Gain Knowledge towards the compliance to the most      current privacy law in Europe • Gain knowledge on documentation involving EU-GDPR    issues.

COURSE OBJECTIVE

Page 4: EU-GDPR TRAINING - NOV 2018 - VERSION 2grmtraining.com.my/online/course/EU-GDPR_TRAINING-NOV_2018.pdf · The Ritz-Carlton, KL. Program Co-ordinators: M r . K e r s h L L . B ( H o

Data Transfers Documentation for Compliance Which documentation is especially important?

Drafting EU - GDPR Documents 

Data Protection Policy – A guide Privacy Notice – A guide Consent Request Form – A guide International Transfer of Personal Data – A guide Personal Data Breach Management – A guide Information Security Policy – A guide

POWER SOLUTIONS TRAINING MANAGEMENT and GRM TRAINING SDNBHD  are committed to delivering effective and innovative training toindividuals and organizations during the duration of this course.  THE COURSE FEE: RM 1895.00 The fee includes all meal, the course manual, and a certificate of completion. COURSE TIMINGS:  Registration: 8.30 am, Course Begins: 9.00 am, Morning Break: 10.30am to 10.45am, Lunch: 1.00 pm to 2.00pm, Tea Break: 3.30 pm - 3.45pm Course Ends: 5.00 pm COURSE MANUAL All participants will be provided with a course manual to aid in the training. 

Ambigah Krishnan has more than 15 years of training andcorporate experience on Law topics. She is a PSMB licensed corporate trainer [Licence NoTTT/3886] and Corporate Legal Adviser who has vastprofessional experience in the training industry. She hasexcellent communication, writing, people and classmanagement skills. Work Experience Ambigah Krishnan is an experienced lawyer and trainer andhas been involved in Data Protection training andconsultancy, Contract Management, Contract Drafting civillitigation, employment matters, Service- Level Agreements,Employment Law and IR, company matters, corporate,banking issues and Testamentary issues including thewriting of Wills. She has trained and lectured for privatecompanies and government entities. Participants made upof managers, CEOs, CFOs, corporate and governmentsupport staff and executives.   Areas Trained She has conducted seminars for the Personal DataProtection Act 2010 & Standards 2015 and Personal DataProtection Compliance implementation, EU – General DataProtection Regulations 2018, Employment law includingmock Industrial hearings of Domestic Inquiries, Lawrelating to Termination under Labour laws, EmploymentLaw for HR and Non HR Managers, Tenancy laws andProcedure, Drafting Commercial Contracts Advance Level,Contracts and issue of liability for Vendors, Suppliers andProcurement Managers, Seminar on Prevention of StaffFraud in association with PDRM. Publications Involved in the advice and drafting of procedures andprocesses for Personal Data Protection Compliance, HumanResource policies and procedures and writing HumanResource Manual for the corporate sector and draftingPolicies. Industry Experience Trained for the Hospitality sector, Telecommunicationsector, Health sector, Finance sector, Government ofMalaysia, Insurance sector, Government Linked Companies,Auto Industry, Manufacturing sector and Oil & Gas Industryand many more. 

SPEAKER

-END-

Ms. AMBIGAH KRISHNAN

MODULE 4

MODULE 5 LL.B (Hons) (London), Certificate In Legal Practice(Malaysia), TESOL (Canada).

This introductory course is suitable for any individual withvested interested in data privacy and EU-GDPR, mainly: • Directors, • General Managers, • HR Directors & Managers, • Hotel Managers, • Revenue Managers, • Compliance or legal professional, • E-commerce operators, • Customer service and sales team, lead with international           customers or overseas sells, & • IT system administrators

Who Should Attend?

Methodology

Interactive lectures, group discussions, case studies, Q&Asessions & practical learning.