The General Data Protection Regulation (GDPR) requires a controller who decides on the processing of personal data and monitors compliance with the principles. According to Art. 4(7) GDPR, this can be employees in the company as well as external organisations.
The data "controller", which in most cases is the employer, is responsible under Article 39 of the GDPR for ensuring that its employees are adequately informed about the data protection rules and have the necessary knowledge and skills to perform their data protection tasks. Therefore, it is recommended to train employees to raise their awareness of data protection and to ensure that they understand and comply with the requirements of the GDPR.
One can conduct the trainings internally or outsource them to external service providers. The trainings should be repeated regularly to ensure that the knowledge is always up to date.
Our training is designed to educate employees on various data protection, IT security, and compliance topics to minimise the risk of data breaches and cyber-attacks. Our catalogue is regularly updated with new content and information on new regulations.
Below are some of the current courses:
For those who choose our Professional or Enterprise packages, many of our courses are already included in the price. For those who only want to use the training courses, we offer a flexible pricing model based on the number of your employees:
For companies with more than 250 employees, we are happy to offer an individual price on request. Our prices have been carefully calculated to offer you high-quality data protection training at competitive rates.
No, there is no official obligation stated in the General Data Protection Regulation (GDPR). However, there is an indirect obligation, because a company must ensure that personal data is processed in accordance with the requirements of the GDPR and should of course also train its employees in this sense.
Such training aims to make employees aware of the careful handling of personal data and to provide them with the necessary knowledge and skills to avoid data protection breaches. Data protection training should therefore take place regularly, especially for new employees and when data protection regulations change.
The exact requirements for data protection training can vary depending on the country and industry. However, in the European Union there are some requirements that apply to all companies that process personal data.
According to Article 39 of the General Data Protection Regulation (GDPR), one of the responsibilities of a data protection officer for companies is to ensure that employees receive regular training to ensure that they are able to fulfil their data protection obligations. Training should be adapted according to the specific tasks and needs of the employees.
Employees who process personal data should receive regular training. In addition, it may be necessary to provide even more frequent training in the event of changes to data protection regulations or the introduction of new technologies or procedures that have an impact on the processing of personal data.
The costs for data protection training can vary depending on the scope and content of the training.
For customers who opt for the Professional or Enterprise package, data protection training is of course already included in the price; in the Basic package, on the other hand, training can be booked individually at any time. The exact prices may vary, however, depending on individual needs.
It is important to note, however, that the price for data protection training is only part of the overall service offered by heyData. For companies that work with us, we also take on the role of external data protection officer and deliver support in the implementation of technical and organisational measures, a comprehensive digital audit and many other benefits.