Deloitte: Special categories of data under GDPR

Date                                       14 July 2021

Time                                       17:00–19:00 CET

Venue                                    Online

Price                                      €40

Registration link                 https://www.mitcentre.com/cpd/?c=320

Webinar description

The course will look briefly into GDPR in general and aims to focus on the special categories of data processing. During the session we will discuss the legal basis to process normal types of data as described in Article 6 of the regulation, together with the legal basis to process special categories of data as provided under Article 9 of GDPR.

Furthermore, the course will examine how a data controller shall perform a Privacy Impact Assessment to examine the privacy risk when processing special categories of data within a project. As an example, the course will look into the processing of biometric data to verify the identity of an individual through digital means.

Webinar topics

• An introduction to GDPR
• Identification of special categories of data
• The main differences and obligation of data controller and processor when such categories of data are involved on a large scale
• Legal basis of processing (non special category) – Article 6
• Legal basis of processing special categories of data – Article 9
• The Privacy Impact Assessment – what is it?
• The content of the Privacy Impact Assessment – an example using processing of biometric data to identify and verify an individual
• Concluding remarks

Target audience

• Data Protection Officers
• Directors of entities processing special categories of data,
• Students with interest in Data Privacy

Trainer name

Mr John Caruana

Trainer bio & experience

John has over 10 years of experience within the financial services industry in compliance, MLRO, Directorships of collective investment schemes, FX trading, Hedging, and investment advice. He graduated with Honours in Banking & Finance in 2008 and achieved a Master of Science in Banking & Finance in 2015 where he was awarded an Honors Roll by the University of Malta and best dissertation award by the Malta Stock Exchange. In July 2018, John was the first Maltese resident to be awarded two qualifications in Data Privacy by the International Association of Privacy Professionals (IAPP) being the Certified Information Privacy Professional / Europe (CIPP/E) and Certified Information Privacy Manager (CIPM). John is a co-founder and Compliance Director of a local AML consultancy firm. He is a fellow member of the Malta Compliance Officers Association (MACO) and a member of the International Association of Privacy Professionals.