The Chartered Institute of Personnel and Development

Short training courses

Content of Understanding Data Protection Law

PROGRAMME

Data protection overview


  • what is personal data?
  • the difference between sensitive and nonsensitive data
  • who is responsible for applying the Data Protection Act?
  • understanding the data protection principles
  • collecting personal information – fair collection notices

Good housekeeping


  • what to keep and what to discard
  • security issues
  • training and communicating with staff
  • how to deal with transmission overseas

The Data Protection Codes of Practice

  • understanding and applying the Code of Practice
  • part four of the Code – employees’ health, drug and alcohol testing at work

Beginning and during employment

  • recruitment and selection (including advertising, dealing with applications, shortlisting, selection testing, references, medical records, vetting, verification, validation, access to interview notes and retention of records)
  • collection and storage of information
  • equal opportunities monitoring
  • pensions and insurance schemes
  • disclosure policy

Monitoring and surveillance

  • link to human rights issues
  • Regulation of Investigatory Powers legislation and privacy
  • changes to improve the protection of workers’ personal data
  • monitoring communications – telephone, Internet and email policies

Ending employment

  • discipline and dismissal
  • the retention and integrity of records
  • subject access request