On Monday, June 11th we ran our long planned ‘GDPR for Charities’ workshop at the Enterprise Business Centre. This was a one-day event attended by around 40 participants working for or with charities of various sizes.
Shamal Faily opened the workshop (slides) by setting out some of the challenges faced by charities making sense of GDPR, before giving an overview of what would be planned for the day.
The participants were then divided into four groups and, with the assistance of our BU facilitators, used the Data Wheel to conduct a DPIA for a hypothetical but realistic scenario. The groups then came together to present the privacy risks they found to the rest of the participants.
After lunch, Tessa Corner delivered a talk on StreetScene‘s experiences applying the DPIA Data Wheel (slides), before Shamal gave a talk on how to find security & privacy risks, and demonstrated the use of CAIRIS to support the discovery and management of risks (slides).
After these talks, Raian Ali hosted a lively panel on GDPR and its implications for charities before Jane closed the day by summarising some of the results of applying the DPIA Data Wheel with StreetScene (slides) and discussing some next steps to build on the momentum from this workshop (slides).