GDPR: DSARs and Data Breaches

This session gives an overview of GDPR Requirements covering DSARs, data breach handling, GDPR requirements, & DPC regulatory expectations.

Access is an important right which gives rise to the largest number of national complaints to the DPC annually, accounting for over 34% of all complaints in 2024. 7,781 valid data breaches were received by the DPC in 2024. Data incidents and breaches can have a significant impact on both data subjects and controllers. The session is designed to translate legal requirements into operational practice, helping organisations reduce regulatory risk and respond confidently to DSARs and data incidents.

Topics Covered:

· Core GDPR principles relevant to DSARs and data breaches

· Data subject access rights under Articles 12 and 15 GDPR

· Recognising and validating DSARs, including informal requests

· Identity verification and scope management

· Statutory deadlines, extensions, and permissible exemptions

· Common DSAR compliance failures and DPC enforcement trends

· Definition of a personal data breach under Article 4 GDPR

· Breach detection, containment, and internal escalation

· Risk assessment and the threshold for DPC notification

· GDPR breach notification timelines and content requirements

· Communicating with affected data subjects

Who should attend:

This module is suitable for anyone involved in identifying/responding to DSARs or managing data breaches. It is recommended for Compliance Officers, Data Protection Officers, Individual Intermediaries/Brokers, risk management personnel and others who require a general understanding of Irish Data Protection requirements.

CPD:

Up to 2 Formal Hours from the Institute of Insurance, Institute of Bankers and LIA

A CPD certificate will be issued upon course completion along with a PDF version of the training materials.

Cost: €275 per person

Location: Online Webinar

Cancellation Policy:

You may cancel and claim a refund at any point up to 7 days prior to the date of the event. In our absolute discretion we may process a transfer to another date where an attendee seeks to cancel within the 7 days prior to the event date. Where we need to cancel an event, we will always seek to give a minimum of 7 days notice and will promptly process a refund.