That makes sense Darren. I was being deliberately antagonistic but I would talk with your DPO and ask them to justify annual training. Why annual? Why not biannual or biennial? If you don’t have other requirements to contend with (like the NHS mandatory training requirements), then appropriate training can be a "good" refresher every two years with a number of smaller "keynote" sessions in between.
This is where a teacher comes in, to look at it from the educational rationale view rather than just "we must train in DPA".
Good luck with it all!
Simon.
Simon Howarth MSc. MBCS CITP CIPP/E
Director & Consultant, Data Protection Officer
The Information Edge
(Webtech Systems Limited)
Tel. +44 (0) 7836 365588
www.the-ie.co.uk
-----Original Message-----
From: This list is for those interested in Data Protection issues <[log in to unmask]> On Behalf Of Darren Richards
Sent: 16 October 2019 13:49
To: [log in to unmask]
Subject: Re: [data-protection] Refresher Training
Hi Simon
Thanks for the very useful reply. To be honest the only reason I am considering is because of our DPO insisting we force staff to carry out the full training each year. I challenged this as a point of usefulness and thought this would be a good place to test my own reasoning.
I want staff to get something from training/refresher as it makes no sense to just repeat the same training year in, year out. We can focus the refresher training on key areas (i.e. where did most breaches occur and how?) and show that we are trying to reduce breaches by learning from past ones. Users are savvy and if they see the same training they will skip it and we won't gain any value from it.
Darren
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask] All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|