We're now only a little over six months away from the most substantial overhaul of data- protection law in a generation, in the form of the General Data Protection Regulation (GDPR). As well as extending many of the principles of the current Data Protection Act, the GDPR will introduce new responsibilities for organisations that process personal data, as well as giving individuals additional rights over how their personal data can be used.

In order to enable organisations to get their staff up to speed with the new legislation quickly and cost-effectively, Cylix has worked with the Information Governance team at Norfolk County Council to develop an all-new GDPR Data Protection online training course. The programme outlines the scope and provisions of the new legislation, and explores what staff will need to do to comply with it.

Incorporating extensive case studies to explore how the law applies in practice, the new course has a 60-minute run time and comprises four main sections:
The big picture

• Why is it so important to protect personal data?
• The scope of the GDPR… and the penalties for non-compliance
• What information is covered by the GDPR?
• What does "processing data" encompass?
• Understanding who's who: data subject, data controller, data processor, DPO, ICO

What the law says

• The core principles for processing personal data
• Rules for transferring/storing personal data outside Europe
• What to do in the event of a data breach
• Rights of the data subject, including the right to be forgotten

Putting it in practice

• Series of case studies in which users need to decide how to comply with the GDPR in a range of realistic situations

Test your knowledge

• Comprehensive mastery test to check each user's retention and understanding of key points
• On successfully passing the test, users can download a personal course completion certificate.

While the course focuses on the practical, day-to-day aspects of complying with the GDPR, a comprehensive "Ask the Expert" resource is available, enabling users to drill down into specific aspects of the law. An innovative transition training mode is also available, which highlights the main differences between the Data Protection Act and GDPR, such as the requirement for explicit consent through active opt in. As Steven Price, Cylix's Managing Director, explains, "The transition mode is for users who study the course over the next six months. It will enable them to quickly identify the additional things that they need to know - and do - when the GDPR comes into force."

The course has been developed in Cylix's groundbreaking new HTML 5 framework, so will run on a broad range of computer systems and devices, including iPads and Android tablets. It can be deployed as a cloud-based resource, hosted by Cylix, or through any SCORM-compliant learning-management system, enabling administrators to track and report on usage for audit purposes.