Overview
The Dubai International Financial Centre (DIFC) introduced a new data protection law in 2020 – Data Protection Law No. 5 – applicable from 1st July 2020. This introductory module puts the DIFC Data Protection Law into context, highlighting its core requirements in a way that is sufficiently comprehensive to be suitable for all staff needing to be aware of its purpose and impact.
Course Details
The module will take around 40 minutes to complete, and is made up of 8 subsections:
Introduction
- The aim of the Law
- Why it is necessary
- Who it applies to
- When it applies
General Requirements
The principles of the Law:
- Lawful, fair and transparent processing
- Purpose limitation
- Data limitation
- Data subject rights
- Accuracy
- Data retention period
- Data security
- Accountability
Lawful Processing (incl consent)
- The main instances that provide organisations with the legal basis they require
- What makes consent valid
Individual Rights
- Right to be informed
- Right of access
- Right to rectify
- Right of erasure
- Right to data portability
Accountability
- Privacy by design
- Data protection impact assessments
- The Data Protection Officer (DPO)
- High risk processing activities
Breaches and notifications
- Notification requirements of a personal data security breach
Data Transfers
- Restriction on the transfer of personal data outside of the DIFC except in limited circumstances
- The limited circumstances in which personal data may be transferred
Assessment
- 10 multiple choice questions
Key features of our eLearning include:
In-House Subject Matter Experts
Experienced, full-time GRC practitioners
Fully Customisable
Able to tailor any module to your specific requirements
Access All Modules
No restriction to module access
Multi-Device Compatible
Deliverable on desktops, laptops, tablets and smartphones
Trackable Testing
Easy to generate reports on progress and results
Flexible Implementation
Delivered through our LMS or deployed on your existing system
