The General Data Protection Regulation (GDPR) continues to impact legal firms and organizations worldwide that collect, process, store, or transfer personal data connected to individuals in the European Union. Many U.S.-based organizations mistakenly assume GDPR does not apply to them—until they face vendor demands, contractual obligations, customer expectations, or regulatory inquiries.
This program provides a practical overview of GDPR obligations, including lawful basis for processing, consent, data subject rights, vendor management, cross-border transfers, breach response, and governance expectations.
Participants will learn where privacy programs commonly fail in practice and how organizations can build practical controls that align with regulatory expectations without creating unnecessary operational burden.
Items to be addressed: