Data Protection Compliance: A Guide to GDPR and Irish Data Protection Law

Introduction

Part 1: Whether Compliance with GDPR is Required?
Chapter 1: Identify whether personal data is being processed
Chapter 2: Identify data sets: Controller versus Processor
Chapter 3: Identify whether personal data is processed within the scope of the GDPR
Chapter 4: Identify if an exception applies

Part 2: Conditions under which a CONTROLLER can Process Personal Data
Chapter 5: Identify legal basis to process personal data
Chapter 6: Identify whether legal basis sufficient for an exception processing activity
Chapter 7: Demonstrate compliance with the GDPR principles
Chapter 8: Ensure data subject rights are provided
Chapter 9: Ensure appropriate technical and organisational measures in place
Chapter 10: Ensure data breach procedures in place

Part 3: Transferring Personal Data
Chapter 11: Transferring personal data between controllers
Chapter 12: Transferring personal data to processors / sub-processors
Chapter 13: Transferring personal data within and outside the EU
Chapter 14: Practicalities of transfers within a complicated network

Part 4: Miscellaneous
Chapter 15: Data protection officer
Chapter 16: Data protection representative
Chapter 17: Codes of conduct and certification
Chapter 18: Supervisory Authority and the EDPB
Chapter 19: Liabilities and Penalties
Chapter 20: Practicalities of Privacy Policies, Human Resources and Marketing