The Ultimate GDPR Practitioner Guide

Stephen Massey is a highly respected Data Protection and Information Security Practitioner with over 20 years of experience. He has developed and directed international information security and operational risk functions in a range of sectors including financial services and commercial real estate. He is an acknowledged specialist in information risk & operational risk management, data protection, and third-party risk governance and has managed the successful implementation of global projects and business initiatives. Experienced with IT security controls and regulatory compliance auditing including business and IT service continuity planning, network and perimeter security, and data privacy.Stephen originally studied Physics and the University of Manchester Institute of Science and Technology (UMIST), holds a 1st Class Honours Degree in Intelligence and Security from the University of Staffordshire and a Master's Degree in Business Continuity, Security and Emergency Management from Bucks University. In addition to Stephen's academic achievements, Stephen is a Certified Information Systems Security Professional (CISSP) in good standing.

The Ultimate GDPR Practitioner Guide provides those tasked with implementing Data Protection processes, useful information on how to achieve compliance with GDPR. The book is crammed with advice, guidance and templates and also includes a copy of the full regulation text and the supporting recitals. Topics include:• The Data Protection Officer

• Data Protection Policy

• Data Protection / Privacy Notices

• Data Protection Impact Assessments (DPIA)

• Data Protection / Privacy by Design

• Outsourcing

• Subject Access Requests

• And Much Much More!
"We're all going to have to change how we think about data protection." Elizabeth Denham, UK Information Commissioner
When Elizabeth Denham, the UK Information Commissioner, delivered the above quote at a lecture for the Institute of Chartered Accountants in England and Wales in London on 17 January 2017, she was highlighting the requirement for organisations to be accountable for the Personal Data they hold and process. Under the EU General Data Protection Regulation (GDPR) we all need to up our game!
GDPR is a transformative piece of regulation that applies from 25 May 2018. GDPR enhances current rights and freedoms afforded to EU citizens under the 1995 EU Data Protection Directive (95/46/EC). GDPR gives Supervisory Authorities strengthened powers to take enforcement action on those organisations who fail in their duty to uphold those rights and freedoms. GDPR is a game-changer!