GDPR and mandatory training

Regarding the processing of personal data, the General Data Protection Regulation (GDPR) establishes the obligation of training for all workers and collaborators who process personal data of natural persons.

Personal data protection (privacy), previously regulated by Legislative Decree 196 / 2003 (Privacy Code), involves companies and professionals who use personal data, influencing their activities and organization. 

Il EU Regulation 679/2016 starting from May 25, 2018, it changed the way personal information is managed for companies and professionals. 

This change, despite the continuity recommended by the Guarantor Authority of Data Protection, determines the need to adapt processes and methods of keeping personal data in large and small organizations and also for professionals in the health and prevention and protection of personal data sectors.

Each • innovative business organization based on the use of technologies and digitalization of internal and external processes, as well as the active and continued promotion of the services we offer through business development, marketing and communication systems (letter "I" of our logo actually stands for "Innovation"); has the task of establishing the limits within which employees and collaborators have the right to access personal data on the basis of the tasks assigned to them and the duty to guarantee constant training to all staff.

The principle is to avoid illicit disclosure or incorrect use of the same in relation to the permitted purposes.

In case of failure to provide training, pursuant to art. 83 paragraph 4 of Regulation 2016/679, the extremely onerous administrative fine (up to 10 million euros) or, for companies, up to 2% of the annual global turnover of the previous year, whichever is higher.

The Guarantor recommended the establishment of a training plan and to prepare, for any audits, the documentation that represents evidence of the training provided (handouts and results of learning tests).

It is important to be able to verify the actual use of operating instructions and the related levels of authorization for processing.

EB Sicurezza e Ambiente together with law firms of primary importance and competence is at your disposal to assist you with the necessary obligations.